The package has a focused dependency footprint, clear integration guidance, and a recent release with strong test notes. Read-only workflow permissions and security scanning help, though the unpinned actions weaken build reproducibility.
67%
Total Score
63
100
89
83
The registry lists one publishing maintainer. This is a modest support base for a user-owned project, although the recent release and repository activity provide some compensation.
The registry namespace and repository are owned by the same individual account, showing consistent ownership but no organizational backing to broaden maintenance capacity.
The package has existed for about five years with six releases, one in the last 12 months, and a median interval of about 307 days. The recent release is positive, but the slow cadence limits confidence in ongoing maintenance.
The repository shows zero commits and zero active maintainers in the past three months. The recent release partly offsets this, but the lack of recent development activity raises abandonment risk.
The repository has zero stars and forks and one watcher. Popularity is only supporting evidence, but these values provide little external evidence of maturity or community support.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
thecodingmachine/graphqlite Version ^8.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.