mindgram/graphql-federation
Clear documentation, tests, and licensing make adoption straightforward. The repository has no security policy or scanning, and its very small public footprint offers limited reassurance. Pin version 3.0.0 and confirm maintenance before building around it.
60%
Total Score
50
75
50
Health Score Breakdown
The package has only four releases since November 2021, with no release in the last 12 months and a median interval of about 659 days, indicating slow maintenance.
There were no commits and no active maintainers in the last 3 months, which weakens evidence of ongoing maintenance, although the repository is not archived and a recent release exists.
The repository reports zero stars, forks, and watchers, so there is little community evidence to offset the thin maintenance activity; popularity remains supporting rather than decisive evidence.
Composer build tooling is present, but no security scanning tools were detected, leaving a modest transparency and maintenance-hygiene gap.
No repository security policy was found, reducing transparency around vulnerability reporting and response.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Pascal de vink |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 webonyx/graphql-php Version ^v15.20 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 6 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.