The official, runtime independent Language Service for GraphQL
82%
Total Score
88
100
100
83
100
One contributor made 59 of 64 recent commits, or about 92%, which creates continuity risk; the organization backing and three additional active contributors partly compensate.
All four workflows were analyzed with no untrusted checkouts or script injections, but all 53 action references are unpinned and the audit found high-confidence ad hoc package installation plus trusted-publishing usage; low-confidence cache findings are only hygiene concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
nullthrows Version ^1.0.0 | — | — |
debounce-promise Version ^3.1.2 | — | — |
vscode-languageserver-types Version ^3.17.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.