simpod/graphql-utils

Release historycaution

The package has existed for over 8 years with 21 releases, but has had no registry release in the last 12 months. The recent repository update and documented release notes partly offset the slow registry cadence.

Repo bus factorcaution

All recent commit activity came from one contributor, leaving maintenance dependent on a single active person. The repository is user-owned rather than organization-owned, so there is no provided backing signal to offset that concentration.

Repo commit activitycaution

Only one commit was recorded in the last 3 months, indicating limited recent development activity. The recent push shows the project is not abandoned, but does not demonstrate a broad maintenance cadence.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence of unsafe code.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.