Minimal GraphQL client supporting Node and browsers for scripts or simple apps.
72%
Total Score
67
100
94
67
There were no commits and no active maintainers in the last 3 months. The recent release history and a repository push in May 2026 provide some compensation, but the current maintenance pause raises abandonment risk.
The repository has 52 open issues and 7 open pull requests, but no issues or pull requests were opened or closed in the last month, indicating limited recent issue-management activity.
The repository uses TypeScript, Vite, Vitest, and npm scripts for builds and tests, but no security-scanning tooling was detected, leaving a modest security-hygiene gap.
No repository security policy was found, so vulnerability-reporting expectations and response procedures are not documented.
All 5 workflows were analyzed without failed files or audit findings, and no untrusted checkout or script-injection sinks were found. However, all 23 action references are unpinned and one workflow grants top-level write permissions, creating workflow supply-chain and permission-hygiene concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@graphql-typed-document-node/core Version ^3.2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.