graphql
A Query Language and Runtime which can target any service.
45
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
benjieleebyronyaacovcri1gmjmahoneenisdenjo
Keywords
graphqlgraphql-js
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Legitimate maintainer transition within GraphQL Foundation; jdecroock is a known, trusted GraphQL ecosystem maintainer with extensive track record. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): New maintainers are all well-known GraphQL Working Group members; reflects public governance transition from Meta to GraphQL Foundation. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): Removed maintainers were former Meta employees; removal reflects documented project governance transition. | ai | |
| source-diff | large-new-source-files | AI (source-diff): Diff is against v15.x; v16 is a major rewrite (ESM, TS) that naturally adds many files. No suspicious content. | ai | |
| provenance | missing-githead | AI (provenance): graphql-js now publishes via GitHub Actions with SLSA provenance attestation, which supersedes gitHead as a supply-chain signal. | ai | |
| bogus-package | bogus-package | AI (bogus-package): leebyron is the creator of GraphQL; spam flag is false positive. No-deps is by design for this foundational library. | ai |
Versions (showing 45 of 145)
| Version | Deps | Published |
|---|---|---|
| 0.4.18 | 1 / 12 | |
| 0.4.17 | 1 / 12 | |
| 0.4.16 | 1 / 12 | |
| 0.4.15 | 1 / 12 | |
| 0.4.14 | 1 / 12 | |
| 0.4.13 | 1 / 14 | |
| 0.4.12 | 1 / 14 | |
| 0.4.11 | 1 / 14 | |
| 0.4.10 | 1 / 14 | |
| 0.4.9 | 1 / 14 | |
| 0.4.8 | 1 / 14 | |
| 0.4.7 | 1 / 14 | |
| 0.4.6 | 1 / 14 | |
| 0.4.5 | 1 / 14 | |
| 0.4.4 | 1 / 14 | |
| 0.4.3 | 1 / 14 | |
| 0.4.2 | 1 / 13 | |
| 0.4.1 | 1 / 13 | |
| 0.3.0 | 1 / 13 | |
| 0.2.6 | 1 / 13 | |
| 0.2.5 | 1 / 13 | |
| 0.2.4 | 1 / 13 | |
| 0.2.3 | 1 / 13 | |
| 0.2.2 | 1 / 13 | |
| 0.2.1 | 1 / 13 | |
| 0.2.0 | 1 / 14 | |
| 0.1.12 | 1 / 14 | |
| 0.1.11 | 1 / 14 | |
| 0.1.10 | 1 / 13 | |
| 0.1.9 | 1 / 13 | |
| 0.1.8 | 1 / 11 | |
| 0.1.7 | 1 / 11 | |
| 0.1.6 | 1 / 11 | |
| 0.1.5 | 1 / 11 | |
| 0.1.4 | 1 / 12 | |
| 0.1.3 | 1 / 12 | |
| 0.1.2 | 1 / 11 | |
| 0.1.1 | 1 / 11 | |
| 0.1.0 | 1 / 12 | |
| 0.0.2 | 1 / 3 | |
| 17.0.0-alpha.14 | 0 / 0 | |
| 17.0.0-alpha.13 | 0 / 0 | |
| 17.0.0-alpha.12 | 0 / 0 | |
| 17.0.0-alpha.11 | 0 / 0 | |
| 17.0.0-alpha.10 | 0 / 0 |