graphql-subscriptions

Build provenancecaution

No build attestation or trusted-publisher provenance was reported for the release, leaving publication origin less verifiable.

Release historycaution

The package has 40 releases over more than 10 years, but no releases in the last 12 months; this indicates a mature project with currently reduced release activity.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with a currently dormant maintenance state.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, although 4 pull requests remain open; this provides little evidence of active ongoing maintenance.

Repo toolingcaution

The repository uses TypeScript build tooling, but no security scanning tools were detected; this is a modest transparency and hygiene gap.