graphql-upload-minimal

Minimalistic and developer friendly middleware and an Upload scalar to add support for GraphQL multipart requests (file uploads via queries and mutations) to various Node.js GraphQL servers.

Latest 1.6.4

NPM

68%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Attestations

Are you affected? Scan for Free

Health Score Breakdown

Build provenance

No build attestation, trusted publisher, or staged publishing evidence is available, leaving the release's build origin less transparent.

Maintainers

Only one registry account has publish access, which creates operational concentration risk, though the repository is backed by an organization.

Repo commit activity

No commits and no active maintainers were recorded in the last 3 months, despite a release history and a repository push about 2 months ago; this is the main maintenance concern.

Repo issue activity

Only one issue and one pull request are open, but no issues or pull requests were closed in the last month, so current responsiveness is not demonstrated.

Repo tooling

The repository reports no build tooling or security scanning tools, reducing evidence of automated quality and security checks.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2025-10884 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. graphql-upload-minimal is vulnerable to Prototype Pollution in versions 0.1.0 - 1.6.3.	0.1.0 - 1.6.3	Medium
AIKIDO-2025-10826 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. graphql-upload-minimal is vulnerable to Prototype Pollution in versions 0.1.0 - 1.6.2.	0.1.0 - 1.6.2	Medium