graphweaver
A tool for managing, running, debugging and building Graphweaver projects
82%
Total Score
healthy
Healthy release with active maintenance and provenance, despite unpinned workflow dependencies.
Health Score Breakdown
The release has 16 runtime dependencies spanning database adapters, GraphQL utilities, and build components; this is a meaningful dependency surface but consistent with the package's broad data-integration role.
All 14 workflows were analyzed without untrusted-checkout or script-injection findings, but all 64 action references are unpinned and two high-confidence findings identify unpinned container images; one workflow also installs a package outside a lockfile.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2025-10129 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. graphweaver is vulnerable to Insertion of Sensitive Information into Log File in versions 0.1.18 - 2.12.1. | 0.1.18 - 2.12.1 | Low |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 yargs Version 18.0.0 | — | — |
semver Version 7.7.3 | — | — |
esbuild Version 0.28.1 | — | — |
chokidar Version 5.0.0 | — | — |
inquirer Version 13.2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 21 days ago
- Created
- 3 years ago
- Unpacked Size
- 0.2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.