graphql-by-pop/graphiql

This is a mature, actively maintained and non-deprecated release: the package has existed for over 6 years, has 159 releases including 33 in the last 12 months, and the linked organization-owned repository was recently updated. The main concerns are operational rather than abandonment-level: all 13 commits in the last 3 months came from one contributor, the repository has very little public traction, and neither the artifact nor repository contains tests or a security policy. The small, static GraphiQL client artifact is clearly documented, has a matching repository, uses no install-time scripts, and declares an MIT license, so it is generally reasonable to depend on with awareness of its concentrated maintenance base.

Latest 19.2.4

Packagist

78%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Maintainers

Only one registry account has publish access. This is a limited publishing fallback, although repository activity and organization ownership provide some compensating backing.

Package scaffolding

A substantial README documents installation, testing, security reporting, contribution, and licensing, but neither the package nor repository provides tests or a changelog. The missing tests are a genuine maintenance-hygiene gap for a dependency, while the README's references provide some compensating transparency.

Repo bus factor

All 13 recent commits came from one contributor, producing a complete concentration of recent activity. Organization ownership offers some continuity, but no second active contributor is shown, so the maintenance bus factor remains a caution.

Repo popularity

The repository has only 2 stars, 0 forks, and 1 watcher. Popularity is supporting evidence rather than a verdict, but these very low figures provide little external validation.

Repo tooling

Composer is used as a build tool, but no security scanning tools are configured. Build tooling supports reproducibility, while the missing security automation is a modest transparency gap for a dependency.