npmpackage.info

Gathering detailed insights and metrics for @graphql-codegen/typescript

Gathering detailed insights and metrics for @graphql-codegen/typescript

@graphql-codegen/typescript - 4.1.6 | npmpackage.info

@graphql-codegen/typescript

A tool for generating code based on a GraphQL schema and GraphQL operations (query/mutation/subscription), with flexible support for custom plugins.

4.1.6

11,105

MIT

TypeScript

88.08 kB

Installations

npm install @graphql-codegen/typescript

Developer Guide

BETA

Typescript

No

Module System

ESM

Min. Node Version

>=16

Node Version

18.20.7

NPM Version

10.8.2

Pull Requests

Open

91

Total

6,683

Closed

626

Merged

5,966

Issues

Open

528

Total

2,639

Closed

2,111

Releases

1,985

June 25, 2025

release-1750855986752

Updated on Jun 25, 2025

June 05, 2025

release-1749128665567

Updated on Jun 05, 2025

May 06, 2025

release-1746539042593

Updated on May 06, 2025

March 27, 2025

release-1743074721096

Updated on Mar 27, 2025

March 07, 2025

release-1741347583945

Updated on Mar 07, 2025

February 23, 2025

release-1740342549291

Updated on Feb 23, 2025

View All 1,985 releases

Languages

6

TypeScript

MDX

JavaScript

Rust

Shell

CSS

TypeScript (83.7%)

MDX (14.57%)

JavaScript (1.25%)

Rust (0.47%)

Developer

Download Statistics

Total Downloads

0

Last Day

0

Last Week

0

Last Month

0

Last Year

0

GitHub Statistics

MIT License

11,105 Stars

8,402 Commits

1,370 Forks

78 Watchers

90 Branches

553 Contributors

Updated on Jul 16, 2025

Maintainers

5

View All 553 Contributors

Package Meta Information

Latest Version

4.1.6

Package Id

@graphql-codegen/typescript@4.1.6

Unpacked Size

88.08 kB

Size

12.64 kB

File Count

22

NPM Version

10.8.2

Node Version

18.20.7

Published on

Mar 27, 2025

Total Downloads

Cumulative downloads

Total Downloads

NaN

Last Day

0%

NaN

Compared to previous day

Last Week

0%

NaN

Compared to previous week

Last Month

0%

NaN

Compared to previous month

Last Year

0%

NaN

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

5

@graphql-codegen/plugin-helpers @graphql-codegen/schema-ast @graphql-codegen/visitor-plugin-common auto-bind tslib

Peer Dependencies

1

ERROR: No README data found!

Empty State

No vulnerabilities found.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Maintained

Determines if the project is "actively maintained".

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

7

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

4

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 4

Details

Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/dotansimha/graphql-code-generator/main.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/dotansimha/graphql-code-generator/main.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/dotansimha/graphql-code-generator/main.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/dotansimha/graphql-code-generator/main.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/dotansimha/graphql-code-generator/main.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/dotansimha/graphql-code-generator/main.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:151: update your workflow using https://app.stepsecurity.io/secureworkflow/dotansimha/graphql-code-generator/main.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/dotansimha/graphql-code-generator/pr.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/dotansimha/graphql-code-generator/pr.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:9: update your workflow using https://app.stepsecurity.io/secureworkflow/dotansimha/graphql-code-generator/release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/website-integrity.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/dotansimha/graphql-code-generator/website-integrity.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/website.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/dotansimha/graphql-code-generator/website.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/website.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/dotansimha/graphql-code-generator/website.yml/master?enable=pin
Info: 12 out of 12 GitHub-owned GitHubAction dependencies pinned
Info: 6 out of 19 third-party GitHubAction dependencies pinned

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

SAST

Determines if the project uses static code analysis.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Reason

46 existing vulnerabilities detected

Details

Warn: Project is vulnerable to: RUSTSEC-2021-0139
Warn: Project is vulnerable to: RUSTSEC-2021-0145 / GHSA-g98v-hv3f-hcfr
Warn: Project is vulnerable to: RUSTSEC-2024-0375
Warn: Project is vulnerable to: RUSTSEC-2020-0095
Warn: Project is vulnerable to: RUSTSEC-2024-0421 / GHSA-h97m-ww89-6jmq
Warn: Project is vulnerable to: RUSTSEC-2024-0384
Warn: Project is vulnerable to: RUSTSEC-2023-0055 / GHSA-c2hm-mjxv-89r4
Warn: Project is vulnerable to: GHSA-2326-pfpj-vx3h
Warn: Project is vulnerable to: RUSTSEC-2023-0086
Warn: Project is vulnerable to: RUSTSEC-2024-0370
Warn: Project is vulnerable to: GHSA-c827-hfw6-qwvm
Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8
Warn: Project is vulnerable to: GHSA-8hc4-vh64-cxmj
Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6
Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
Warn: Project is vulnerable to: GHSA-vhxf-7vqr-mrjg
Warn: Project is vulnerable to: GHSA-67mh-4wv8-2f99
Warn: Project is vulnerable to: GHSA-f7f6-9jq7-3rqj
Warn: Project is vulnerable to: GHSA-jchw-25xp-jwwc
Warn: Project is vulnerable to: GHSA-cxjh-pqwp-8mfp
Warn: Project is vulnerable to: GHSA-3wc5-fcw2-2329
Warn: Project is vulnerable to: GHSA-64fm-8hw2-v72w
Warn: Project is vulnerable to: GHSA-cvr6-37gx-v8wc
Warn: Project is vulnerable to: GHSA-f98w-7cxr-ff2h
Warn: Project is vulnerable to: GHSA-cg87-wmx4-v546
Warn: Project is vulnerable to: GHSA-c59h-r6p8-q9wc
Warn: Project is vulnerable to: GHSA-fq54-2j52-jc42
Warn: Project is vulnerable to: GHSA-7m27-7ghc-44w9
Warn: Project is vulnerable to: GHSA-f82v-jwr5-mffw
Warn: Project is vulnerable to: GHSA-g77x-44xx-532m
Warn: Project is vulnerable to: GHSA-7gfc-8cq8-jh5f
Warn: Project is vulnerable to: GHSA-qpjv-v59x-3qc4
Warn: Project is vulnerable to: GHSA-3h52-269p-cp9r
Warn: Project is vulnerable to: GHSA-gp8f-8m3g-qvj9
Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j
Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j
Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
Warn: Project is vulnerable to: GHSA-3mv9-4h5g-vhg3
Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3
Warn: Project is vulnerable to: GHSA-x574-m823-4x7w
Warn: Project is vulnerable to: GHSA-4r4m-qw57-chr8
Warn: Project is vulnerable to: GHSA-xcj6-pq6g-qj4x
Warn: Project is vulnerable to: GHSA-356w-63v5-8wf4
Warn: Project is vulnerable to: GHSA-859w-5945-r5v3
Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q

Score

4.3

/10

Last Scanned on 2025-07-07

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.