ilexn/graphql-payload-object

Release historycaution

The latest release was nearly five years ago, with no releases in the last 12 months and only four releases overall. This materially raises maintenance and compatibility risk, although recent repository activity provides some compensation.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. This weakens evidence of sustained maintenance, although the recent push and merged pull requests show some repository activity.

Security policycaution

The repository has no security policy, leaving vulnerability-reporting and response expectations undocumented. This is a modest transparency gap for a dependency.

Workflow auditcaution

The workflow audit completed cleanly with no dangerous triggers, untrusted checkouts, injection findings, or audit failures. However, all six action references are unpinned, which weakens build reproducibility and supply-chain hygiene.