selveq/directory-graphql

Release historycaution

The package was first released today and has four releases in less than a day, so there is no meaningful track record yet. This is partly offset by the focused package contents and an accompanying changelog.

Repo commit activitycaution

The repository shows zero commits and zero active maintainers over the last three months, although it was pushed recently and the package is newly published. Maintenance capacity is therefore unproven rather than clearly abandoned.

Repo toolingcaution

Composer is used for the build, which fits the package ecosystem, but no security-scanning tooling is present. This is a modest hygiene gap for a newly published package.

Security policycaution

The repository has no security policy. For a small focused module this is a transparency gap, but it does not by itself indicate that the release is unsafe to depend on.