er1z/graphql_accelerator

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, which is a meaningful maintenance and abandonment concern for a young package.

Licensecaution

The manifest declares MIT, but the artifact license file is detected as GPL-3.0, creating a material licensing ambiguity despite a license file being present.

Release historycaution

The package is only 125 days old with five releases, so it has limited operating history; its recent release activity is positive but does not establish maturity.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Workflow auditcaution

All 20 analyzed action references are unpinned, reducing build reproducibility. Three high-confidence template-injection findings are hygiene concerns here because no untrusted checkout, dangerous trigger, or script-injection sink was reported.