raphaelcangucu/gql-client

Release historydanger

The package has six releases, but all occurred within roughly 30 minutes and none were published in the last 12 months despite being about 386 days old. This suggests an unproven and currently inactive release history.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, following its last push more than a year ago. That is a meaningful maintenance and abandonment concern.

Licensecaution

The manifest declares ISC, while the included and repository license files are identified as MIT. The release is licensed, but the mismatch creates avoidable legal ambiguity.

Repo popularitycaution

The repository has zero stars, forks, and watchers, providing no external adoption or review signal. Popularity is supporting evidence only, so this modestly reduces confidence rather than determining the verdict.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. The missing scanning is a modest transparency and maintenance weakness rather than a standalone severe risk.