ruudk/graphql-client-code-generator

Lifecycle scriptscaution

A post-install-cmd script runs during installation, increasing installation complexity and the trust placed in package behavior. No provided signal shows that this script is harmless or necessary, so it is a supply-chain hygiene concern.

Project backingcaution

The registry namespace and repository are owned by the same individual, confirming direct ownership rather than a namespace mismatch. Because the owner type is User, this does not provide the continuity of an organization-backed project.

Repo bus factorcaution

All two recent commits came from a single contributor, giving the project a concentrated maintenance base. The repository is user-owned rather than organization-owned, so there is no provided organizational backing to offset this risk.

Repo commit activitycaution

The repository recorded only two commits in the last three months from one active maintainer. Recent releases show the project is not abandoned, but the low recent activity indicates limited ongoing maintenance capacity.

Repo issue activitycaution

There are no open issues and one open pull request, but there were no new or closed issues or merged pull requests in the last month. This is limited evidence of current community activity, though the recent release provides some compensating maintenance evidence.