overblog/graphql-bundle

Dependency profilecaution

The package has 16 runtime dependencies, including Symfony components and the GraphQL implementation it integrates with; this is a meaningful but coherent dependency surface for a framework bundle.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. A release during the broader period is compensating evidence, but the lack of recent development activity still raises maintenance concerns.

Repo issue activitycaution

There was one new pull request in the last month but no issues or pull requests were closed, while 115 issues and 25 pull requests remain open; this suggests limited recent project throughput.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting guidance undocumented for a security-sensitive server integration.

Token permissionscaution

The only workflow lacks top-level token permissions. No write permissions were observed, but the permissions are not explicitly constrained, which is a modest workflow-hygiene gap.