Package Health

leoloso/pop-graphiql

The package is small and straightforward, with a complete README and no install-time scripts. The linked repository remains active, but its single-contributor workflow and absent security policy leave limited resilience.

Latest 1.10PackagistPackagist

45%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

83

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

60

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

83

Health Score Breakdown

Registry deprecationdanger

Packagist marks the entire package as abandoned, with no replacement named. This is a direct adoption risk even though the source repository remains available.

Release historydanger

The latest registry release was in November 2020, and there were no releases in the last 12 months. The 15-release history shows earlier activity but does not offset the prolonged release gap.

Repo bus factorcaution

All 16 recent commits came from one contributor, creating continuity risk. Organization backing provides some handoff capacity, so this is a caution rather than a severe risk.

Security policycaution

The repository has no security policy. For a client package distributed for web use, this reduces transparency around vulnerability reporting and response.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Leonardo Losoviz

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
5 years ago
Created
6 years ago

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform