npmpackage.info

Gathering detailed insights and metrics for @graphql-tools/schema

Other packages similar to @graphql-tools/schema

graphql-config

5.1.5

The easiest way to configure your development environment with your GraphQL schema (supported by most tools, editors & IDEs)

@graphql-toolkit/schema-merging

0.10.7

A set of utils for faster development of GraphQL tools

@graphql-inspector/graphql-loader

5.0.1

Load GraphQL Schema and Documents from GraphQL files (.graphql, .gql etc)

@graphql-inspector/introspect-command

5.0.8

Introspects GraphQL Schema

Gathering detailed insights and metrics for @graphql-tools/schema

@graphql-tools/schema - 10.0.23 | npmpackage.info

@graphql-tools/schema

🔧 Utility library for GraphQL to build, stitch and mock GraphQL schemas in the SDL-first approach

10.0.23

5,407

MIT

TypeScript

66.51 kB

6.6

Installations

npm install @graphql-tools/schema

Developer Guide

BETA

Typescript

No

Module System

ESM

Min. Node Version

>=16.0.0

Node Version

22.14.0

NPM Version

10.9.2 Pull Requests

Open

36

Total

5,712

Closed

438

Merged

5,238

Issues

Open

141

Total

1,286

Closed

1,145

Releases

1,452

May 27, 2025

release-1748367131046

Updated on May 27, 2025

May 22, 2025

release-1747880094612

Updated on May 22, 2025

April 10, 2025

release-1744296675679

Updated on Apr 10, 2025

March 28, 2025

release-1743164548279

Updated on Mar 28, 2025

March 13, 2025

release-1741907294676

Updated on Mar 13, 2025

March 13, 2025

release-1741870629961

Updated on Mar 13, 2025

View All 1,452 releases

Languages

TypeScript

MDX

JavaScript

Shell

TypeScript (91.11%)

MDX (8.08%)

JavaScript (0.79%)

Shell (0.02%)

Developer

ardatan

Download Statistics

Total Downloads

Last Day

Last Week

Last Month

Last Year

GitHub Statistics

MIT License

5,407 Stars

6,693 Commits

830 Forks

76 Watchers

36 Branches

387 Contributors

Updated on Jul 10, 2025

Maintainers

View All 387 Contributors

Package Meta Information

Latest Version

10.0.23

Package Id

@graphql-tools/schema@10.0.23

Unpacked Size

66.51 kB

Size

9.07 kB

File Count

NPM Version

10.9.2

Node Version

22.14.0

Published on

Mar 13, 2025

Total Downloads

Cumulative downloads

Total Downloads

NaN

Last Day

NaN

Compared to previous day

Last Week

NaN

Compared to previous week

Last Month

NaN

Compared to previous month

Last Year

NaN

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

@graphql-tools/merge @graphql-tools/utils tslib

Peer Dependencies

graphql

Check API Reference for more information about this package; https://www.graphql-tools.com/docs/api/modules/schema_src

You can also learn more about Generating Executable Schemas in this chapter; https://www.graphql-tools.com/docs/generate-schema

No vulnerabilities found.

10

Maintained

Determines if the project is "actively maintained".

10

Security-Policy

Determines if the project has published a security policy.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

9

SAST

Determines if the project uses static code analysis.

3

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 3

Details

Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/ardatan/graphql-tools/pr.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/ardatan/graphql-tools/pr.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/ardatan/graphql-tools/release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/ardatan/graphql-tools/tests.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/ardatan/graphql-tools/tests.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/ardatan/graphql-tools/tests.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:117: update your workflow using https://app.stepsecurity.io/secureworkflow/ardatan/graphql-tools/tests.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/website.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/ardatan/graphql-tools/website.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/website.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/ardatan/graphql-tools/website.yml/master?enable=pin
Info: 9 out of 9 GitHub-owned GitHubAction dependencies pinned
Info: 3 out of 12 third-party GitHubAction dependencies pinned

2

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Fuzzing

Determines if the project uses fuzzing.

Score

6.6

/10

Last Scanned on 2025-07-07

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More