youshido/graphql

Tests, a changelog, and a clear MIT license provide useful safeguards. The small runtime dependency set and matching repository improve transparency, but ongoing ownership remains a concern.

Latest v1.7.1

Packagist

40%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has 90 releases since 2016, but its latest registry release was in December 2019 and there were no releases in the last 12 months, indicating prolonged release abandonment.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, consistent with the lack of recent releases and suggesting that maintenance capacity is currently weak.

Package scaffolding

The artifact and repository include a substantial README, tests, and a changelog. However, the README states that the project is no longer supported and is seeking someone to take ownership, which materially weakens the otherwise positive scaffolding evidence.

Repo issue activity

There were no new or closed issues or pull requests in the last month, despite 12 open issues and 6 open pull requests, indicating that outstanding work is not being actively handled.

Security policy

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented. This is a transparency gap, though it is secondary to the maintenance concerns.