@graphql-toolkit/file-loading
A set of utils for faster development of GraphQL tools
36
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.
Maintainers
ardatandotansimhaurigo
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | missing-githead | AI (provenance): Trusted publisher ardatan with strong track record; missing gitHead reflects a publish environment change, not a security threat. No content changes from prior version. | ai | |
| dependencies | unvetted-dep:unixify | AI (dependencies): [email protected] is a pinned, minimal utility for path normalization; appropriate for this package's file-loading purpose. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): The added unixify dependency is a legitimate, minimal utility for path normalization; its use is clearly visible and appropriate in the codebase. | ai | |
| phantom-deps | phantom-dep:@graphql-toolkit/common | AI (phantom-deps): @graphql-toolkit/common is a same-org sibling package declared as a dependency; phantom detection is a stable false positive for this package. | ai | |
| provenance | publisher-changed | AI (provenance): Publisher transition from ardatan to dotansimha in 2020 is a documented, legitimate maintainer handoff within graphql-toolkit project. | ai | |
| semgrep | semgrep:dynamic-require | AI (semgrep): Dynamic require is expected behavior for a file-loading utility that loads GraphQL schema files at runtime; stable false positive for this package. | ai | |
| provenance | no-provenance | AI (provenance): Package is 2372 days old; predates widespread Sigstore provenance adoption on npm. Not a meaningful risk signal for this package. | ai |
Versions (showing 36 of 36)
| Version | Deps | Published |
|---|---|---|
| 0.10.7 | 2 / 0 | |
| 0.10.6 | 2 / 0 | |
| 0.10.5 | 2 / 0 | |
| 0.10.4 | 2 / 0 | |
| 0.10.3 | 2 / 0 | |
| 0.10.2 | 2 / 0 | |
| 0.10.1 | 2 / 0 | |
| 0.9.12 | 2 / 0 | |
| 0.9.11 | 2 / 0 | |
| 0.9.10 | 2 / 0 | |
| 0.9.9 | 2 / 0 | |
| 0.9.8 | 2 / 0 | |
| 0.9.7 | 2 / 0 | |
| 0.9.6 | 2 / 0 | |
| 0.9.5 | 2 / 0 | |
| 0.9.4 | 2 / 0 | |
| 0.9.3 | 2 / 0 | |
| 0.9.2 | 2 / 0 | |
| 0.9.1 | 2 / 0 | |
| 0.9.0 | 2 / 0 | |
| 0.8.1 | 2 / 0 | |
| 0.8.0 | 2 / 0 | |
| 0.7.5 | 3 / 0 | |
| 0.7.4 | 3 / 0 | |
| 0.7.3 | 3 / 0 | |
| 0.7.2 | 3 / 7 | |
| 0.7.1 | 3 / 7 | |
| 0.7.0 | 3 / 7 | |
| 0.6.8 | 3 / 7 | |
| 0.6.7 | 3 / 7 | |
| 0.6.6 | 3 / 7 | |
| 0.6.5 | 3 / 7 | |
| 0.6.4 | 3 / 7 | |
| 0.6.3 | 3 / 7 | |
| 0.6.2 | 3 / 7 | |
| 0.6.0 | 3 / 7 |