mathsgod/light-graphql

Dependency profilecaution

Seven runtime dependencies, including the GraphQL framework, container, cache, upload, and PSR-7 components, create meaningful update and compatibility surface for a small library, though the dependencies are clearly documented in the README.

Project backingcaution

The registry namespace and repository owner match, but both are tied to an individual user rather than an organization, leaving a relatively narrow visible ownership base.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last three months. The recent release and prior release cadence provide some compensation, but this is still a concrete maintenance risk for a library dependency.

Repo popularitycaution

The repository has zero stars and forks and only one watcher, indicating little public validation or contributor reach. Popularity is supporting evidence rather than a decisive health measure, so this lowers confidence more than it determines the verdict.

Security policycaution

The repository has no security policy. That is a transparency gap for a server library, although the absence of reported dangerous workflows and the presence of GitGuardian scanning provide limited compensation.