npmpackage.info

Gathering detailed insights and metrics for apollo-cache-inmemory

Other packages similar to apollo-cache-inmemory

apollo-enchanted-cache-inmemory

1.2.0

Apollo InMemoryCache wrapper for storing selected only queries and for updating linked/nested without IDs

@jtlan/apollo-cache-inmemory

0.0.2

君土: Core abstract of Caching layer for Apollo Client

apollo-cache-inmemory-fork

1.1.8

Core abstract of Caching layer for Apollo Client

apollo-cache-core-inmemory

0.2.0-alpha.11

Core abstract of Caching layer for Apollo Client

Gathering detailed insights and metrics for apollo-cache-inmemory

apollo-cache-inmemory - 1.6.6 | npmpackage.info

apollo-cache-inmemory

The industry-leading GraphQL client for TypeScript, JavaScript, React, Vue, Angular, and more. Apollo Client delivers powerful caching, intuitive APIs, and comprehensive developer tools to accelerate your app development.

1.6.6

19,593

MIT

TypeScript

9.59 kB

282,092,550 5.3

Installations

npm install apollo-cache-inmemory

Developer Guide

BETA

Typescript

No

Module System

CommonJS

Node Version

10.15.3

NPM Version

lerna/3.20.2/node@v10.15.3+x64 (darwin)

Score

91.6

Supply Chain

97.5

Quality

80.5

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

44

Total

6,925

Closed

1,209

Merged

5,672

Issues

Open

460

Total

5,339

Closed

4,879

Releases

184

@apollo/client@4.0.0-rc.3

Updated on Jul 01, 2025

v3.14.0-alpha.1

Updated on Jul 01, 2025

v3.14.0-alpha.0

Updated on Jun 27, 2025

@apollo/client-codemod-migrate-3-to-4@1.0.0-rc.0

Updated on Jun 27, 2025

@apollo/client@4.0.0-rc.2

Updated on Jun 27, 2025

@apollo/client@4.0.0-rc.1

Updated on Jun 24, 2025

View All 184 releases

Languages

TypeScript

JavaScript

HTML

Shell

TypeScript (98.64%)

JavaScript (1.13%)

HTML (0.2%)

Shell (0.04%)

Developer

apollographql

Download Statistics

Total Downloads

282,092,550

Last Day

17,376

Last Week

407,405

Last Month

1,747,299

Last Year

20,692,449

GitHub Statistics

MIT License

19,593 Stars

12,860 Commits

2,688 Forks

270 Watchers

363 Branches

820 Contributors

Updated on Jul 03, 2025

Bundle Size

31.87 kB

Minified

9.59 kB

Minified + Gzipped

Bundlephobia

Maintainers

View All 820 Contributors

Package Meta Information

Latest Version

1.6.6

Package Id

apollo-cache-inmemory@1.6.6

Size

159.07 kB

NPM Version

lerna/3.20.2/node@v10.15.3+x64 (darwin)

Node Version

10.15.3

Published on

May 09, 2020

Total Downloads

Cumulative downloads

Total Downloads

282,092,550

Last Day

1.9%

17,376

Compared to previous day

Last Week

-9.1%

407,405

Compared to previous week

Last Month

2.8%

1,747,299

Compared to previous month

Last Year

-22.9%

20,692,449

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

apollo-cache apollo-utilities optimism ts-invariant tslib

Peer Dependencies

graphql

title: InMemoryCache description: An explanation of `apollo-cache-inmemory`

apollo-cache-inmemory is the recommended cache implementation for Apollo Client 2.0. InMemoryCache is a normalized data store that supports all of Apollo Client 1.0's features without the dependency on Redux.

In some instances, you may need to manipulate the cache directly, such as updating the store after a mutation. We'll cover some common use cases here.

Installation

npm install apollo-cache-inmemory --save

After installing the package, you'll want to initialize the cache constructor. Then, you can pass in your newly created cache to ApolloClient.

1import { InMemoryCache } from 'apollo-cache-inmemory';
2import { HttpLink } from 'apollo-link-http';
3import ApolloClient from 'apollo-client';
4
5const cache = new InMemoryCache();
6
7const client = new ApolloClient({
8  link: new HttpLink(),
9  cache
10});

Configuration

The InMemoryCache constructor takes an optional config object with properties to customize your cache:

addTypename: A boolean to determine whether to add __typename to the document (default: true)
dataIdFromObject: A function that takes a data object and returns a unique identifier to be used when normalizing the data in the store. Learn more about how to customize dataIdFromObject in the Normalization section.
fragmentMatcher: By default, the InMemoryCache uses a heuristic fragment matcher. If you are using fragments on unions and interfaces, you will need to use an IntrospectionFragmentMatcher. For more information, please read our guide to setting up fragment matching for unions & interfaces.

Normalization

The InMemoryCache normalizes your data before saving it to the store by splitting the result into individual objects, creating a unique identifier for each object, and storing those objects in a flattened data structure. By default, InMemoryCache will attempt to use the commonly found primary keys of id and _id for the unique identifier if they exist along with __typename on an object.

If id and _id are not specified, or if __typename is not specified, InMemoryCache will fall back to the path to the object in the query, such as ROOT_QUERY.allPeople.0 for the first record returned on the allPeople root query.

This "getter" behavior for unique identifiers can be configured manually via the dataIdFromObject option passed to the InMemoryCache constructor, so you can pick which field is used if some of your data follows unorthodox primary key conventions.

For example, if you wanted to key off of the key field for all of your data, you could configure dataIdFromObject like so:

1const cache = new InMemoryCache({
2  dataIdFromObject: object => object.key
3});

This also allows you to use different unique identifiers for different data types by keying off of the __typename property attached to every object typed by GraphQL. For example:

1const cache = new InMemoryCache({
2  dataIdFromObject: object => {
3    switch (object.__typename) {
4      case 'foo': return object.key; // use `key` as the primary key
5      case 'bar': return object.blah; // use `blah` as the priamry key
6      default: return object.id || object._id; // fall back to `id` and `_id` for all other types
7    }
8  }
9});

Direct Cache Access

To interact directly with your cache, you can use the Apollo Client class methods readQuery, readFragment, writeQuery, and writeFragment. These methods are available to us via the DataProxy interface. Accessing these methods will vary slightly based on your view layer implementation. If you are using React, you can wrap your component in the withApollo higher order component, which will give you access to this.props.client. From there, you can use the methods to control your data.

Any code demonstration in the following sections will assume that we have already initialized an instance of ApolloClient and that we have imported the gql tag from graphql-tag.

readQuery

The readQuery method is very similar to the [query method on ApolloClient][] except that readQuery will never make a request to your GraphQL server. The query method, on the other hand, may send a request to your server if the appropriate data is not in your cache whereas readQuery will throw an error if the data is not in your cache. readQuery will always read from the cache. You can use readQuery by giving it a GraphQL query like so:

1const { todo } = client.readQuery({
2  query: gql`
3    query ReadTodo {
4      todo(id: 5) {
5        id
6        text
7        completed
8      }
9    }
10  `,
11});

If all of the data needed to fulfill this read is in Apollo Client’s normalized data cache then a data object will be returned in the shape of the query you wanted to read. If not all of the data needed to fulfill this read is in Apollo Client’s cache then an error will be thrown instead, so make sure to only read data that you know you have!

You can also pass variables into readQuery.

1const { todo } = client.readQuery({
2  query: gql`
3    query ReadTodo($id: Int!) {
4      todo(id: $id) {
5        id
6        text
7        completed
8      }
9    }
10  `,
11  variables: {
12    id: 5,
13  },
14});

readFragment

This method allows you great flexibility around the data in your cache. Whereas readQuery only allowed you to read data from your root query type, readFragment allows you to read data from any node you have queried. This is incredibly powerful. You use this method as follows:

1const todo = client.readFragment({
2  id: ..., // `id` is any id that could be returned by `dataIdFromObject`.
3  fragment: gql`
4    fragment myTodo on Todo {
5      id
6      text
7      completed
8    }
9  `,
10});

The first argument is the id of the data you want to read from the cache. That id must be a value that was returned by the dataIdFromObject function you defined when initializing ApolloClient. So for example if you initialized ApolloClient like so:

1const client = new ApolloClient({
2  ...,
3  dataIdFromObject: object => object.id,
4});

…and you requested a todo before with an id of 5, then you can read that todo out of your cache with the following:

1const todo = client.readFragment({
2  id: '5',
3  fragment: gql`
4    fragment myTodo on Todo {
5      id
6      text
7      completed
8    }
9  `,
10});

Note: Most people add a __typename to the id in dataIdFromObject. If you do this then don’t forget to add the __typename when you are reading a fragment as well. So for example your id may be Todo_5 and not just 5.

If a todo with that id does not exist in the cache you will get null back. If a todo of that id does exist in the cache, but that todo does not have the text field then an error will be thrown.

The beauty of readFragment is that the todo could have come from anywhere! The todo could have been selected as a singleton ({ todo(id: 5) { ... } }), the todo could have come from a list of todos ({ todos { ... } }), or the todo could have come from a mutation (mutation { createTodo { ... } }). As long as at some point your GraphQL server gave you a todo with the provided id and fields id, text, and completed you can read it from the cache at any part of your code.

writeQuery` and `writeFragment

Not only can you read arbitrary data from the Apollo Client cache, but you can also write any data that you would like to the cache. The methods you use to do this are writeQuery and writeFragment. They will allow you to change data in your local cache, but it is important to remember that they will not change any data on your server. If you reload your environment then changes made with writeQuery and writeFragment will disappear.

These methods have the same signature as their readQuery and readFragment counterparts except they also require an additional data variable. So for example, if you wanted to update the completed flag locally for your todo with id '5' you could execute the following:

1client.writeFragment({
2  id: '5',
3  fragment: gql`
4    fragment myTodo on Todo {
5      completed
6    }
7  `,
8  data: {
9    completed: true,
10  },
11});

Any subscriber to the Apollo Client store will instantly see this update and render new UI accordingly.

Note: Again, remember that using writeQuery or writeFragment only changes data locally. If you reload your environment then changes made with these methods will no longer exist.

Or if you wanted to add a new todo to a list fetched from the server, you could use readQuery and writeQuery together.

1const query = gql`
2  query MyTodoAppQuery {
3    todos {
4      id
5      text
6      completed
7    }
8  }
9`;
10
11const data = client.readQuery({ query });
12
13const myNewTodo = {
14  id: '6',
15  text: 'Start using Apollo Client.',
16  completed: false,
17};
18
19client.writeQuery({
20  query,
21  data: {
22    todos: [...data.todos, myNewTodo],
23  },
24});

Recipes

Here are some common situations where you would need to access the cache directly. If you're manipulating the cache in an interesting way and would like your example to be featured, please send in a pull request!

Server side rendering

First, you will need to initialize an InMemoryCache on the server and create an instance of ApolloClient. In the initial serialized HTML payload from the server, you should include a script tag that extracts the data from the cache.

1`<script>
2  window.__APOLLO_STATE__=${JSON.stringify(cache.extract())}
3</script>`

On the client, you can rehydrate the cache using the initial data passed from the server:

1cache: new Cache().restore(window.__APOLLO_STATE__)

If you would like to learn more about server side rendering, please check our our more in depth guide [here].

Updating the cache after a mutation

Being able to read and write to the Apollo cache from anywhere in your application gives you a lot of power over your data. However, there is one place where we most often want to update our cached data: after a mutation. As such, Apollo Client has optimized the experience for updating your cache with the read and write methods after a mutation with the update function. Let us say that we have the following GraphQL mutation:

1mutation TodoCreateMutation($text: String!) {
2  createTodo(text: $text) {
3    id
4    text
5    completed
6  }
7}

We may also have the following GraphQL query:

1query TodoAppQuery {
2  todos {
3    id
4    text
5    completed
6  }
7}

At the end of our mutation we want our query to include the new todo like we had sent our TodoAppQuery a second time after the mutation finished without actually sending the query. To do this we can use the update function provided as an option of the client.mutate method. To update your cache with the mutation just write code that looks like:

1// We assume that the GraphQL operations `TodoCreateMutation` and
2// `TodoAppQuery` have already been defined using the `gql` tag.
3
4const text = 'Hello, world!';
5
6client.mutate({
7  mutation: TodoCreateMutation,
8  variables: {
9    text,
10  },
11  update: (proxy, { data: { createTodo } }) => {
12    // Read the data from our cache for this query.
13    const data = proxy.readQuery({ query: TodoAppQuery });
14
15    // Add our todo from the mutation to the end.
16    data.todos.push(createTodo);
17
18    // Write our data back to the cache.
19    proxy.writeQuery({ query: TodoAppQuery, data });
20  },
21});

The first proxy argument is an instance of [DataProxy][] has the same four methods that we just learned exist on the Apollo Client: readQuery, readFragment, writeQuery, and writeFragment. The reason we call them on a proxy object here instead of on our client instance is that we can easily apply optimistic updates (which we will demonstrate in a bit). The proxy object also provides an isolated transaction which shields you from any other mutations going on at the same time, and the proxy object also batches writes together until the very end.

If you provide an optimisticResponse option to the mutation then the update function will be run twice. Once immediately after you call client.mutate with the data from optimisticResponse. After the mutation successfully executes against the server the changes made in the first call to update will be rolled back and update will be called with the actual data returned by the mutation and not just the optimistic response.

Putting it all together:

1const text = 'Hello, world!';
2
3client.mutate({
4  mutation: TodoCreateMutation,
5  variables: {
6    text,
7  },
8  optimisticResponse: {
9    id: -1, // -1 is a temporary id for the optimistic response.
10    text,
11    completed: false,
12  },
13  update: (proxy, { data: { createTodo } }) => {
14    const data = proxy.readQuery({ query: TodoAppQuery });
15    data.todos.push(createTodo);
16    proxy.writeQuery({ query: TodoAppQuery, data });
17  },
18});

As you can see the update function on client.mutate provides extra change management functionality specific to the use case of a mutation while still providing you the powerful data control APIs that are available on client.

The update function is not a good place for side-effects as it may be called multiple times. Also, you may not call any of the methods on proxy asynchronously.

No vulnerabilities found.

10

Maintained

Determines if the project is "actively maintained".

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

License

Determines if the project has defined a license.

10

Security-Policy

Determines if the project has published a security policy.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

8

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

5

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 0

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/api-extractor.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/api-extractor.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/api-extractor.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/api-extractor.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/api-extractor.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/api-extractor.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/arethetypeswrong.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/arethetypeswrong.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/arethetypeswrong.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/arethetypeswrong.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/arethetypeswrong.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/arethetypeswrong.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/change-prerelease-tag.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/change-prerelease-tag.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/change-prerelease-tag.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/change-prerelease-tag.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/change-prerelease-tag.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/change-prerelease-tag.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/change-prerelease-tag.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/change-prerelease-tag.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cleanup-checks.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/cleanup-checks.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cleanup-checks.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/cleanup-checks.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cleanup-checks.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/cleanup-checks.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cleanup-checks.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/cleanup-checks.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/cleanup-checks.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/cleanup-checks.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/cleanup-checks.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/cleanup-checks.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/close-stale-issues.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/close-stale-issues.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compare-build-output.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/compare-build-output.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compare-build-output.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/compare-build-output.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/compare-build-output.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/compare-build-output.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/devtools-errorcodes.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/devtools-errorcodes.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/devtools-errorcodes.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/devtools-errorcodes.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/exit-prerelease.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/exit-prerelease.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/exit-prerelease.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/exit-prerelease.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/exit-prerelease.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/exit-prerelease.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/lock.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prerelease.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/prerelease.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prerelease.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/prerelease.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prerelease.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/prerelease.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/prerelease.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/prerelease.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/prerelease.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/prerelease.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/prerelease.yml:80: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/prerelease.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/prerelease.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/prerelease.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/prerelease.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/prerelease.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-pr-releases.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/publish-pr-releases.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-pr-releases.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/publish-pr-releases.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-pr-releases.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/publish-pr-releases.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/scheduled-test-canary.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/scheduled-test-canary.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/scheduled-test-canary.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/scheduled-test-canary.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/scheduled-test-canary.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/scheduled-test-canary.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/size-limit.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/size-limit.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/size-limit.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/size-limit.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/size-limit.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/size-limit.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/size-limit.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/size-limit.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/snapshot-release.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/snapshot-release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/snapshot-release.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/snapshot-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/snapshot-release.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/snapshot-release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/snapshot-release.yml:94: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/snapshot-release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/snapshot-release.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/snapshot-release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/snapshot-release.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/snapshot-release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/snapshot-release.yml:117: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/snapshot-release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/snapshot-release.yml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/apollographql/apollo-client/snapshot-release.yml/main?enable=pin
Warn: npmCommand not pinned by hash: config/compare-build-output-to.sh:57
Warn: npmCommand not pinned by hash: .github/workflows/change-prerelease-tag.yml:53
Warn: npmCommand not pinned by hash: .github/workflows/exit-prerelease.yml:48
Warn: npmCommand not pinned by hash: .github/workflows/scheduled-test-canary.yml:34
Warn: npmCommand not pinned by hash: .github/workflows/snapshot-release.yml:127
Info: 0 out of 31 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 27 third-party GitHubAction dependencies pinned
Info: 0 out of 5 npmCommand dependencies pinned

0

Fuzzing

Determines if the project uses fuzzing.

0

SAST

Determines if the project uses static code analysis.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Reason

78 existing vulnerabilities detected

Details

Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8
Warn: Project is vulnerable to: GHSA-whgm-jr23-g3j9
Warn: Project is vulnerable to: GHSA-qwcr-r2fm-qrc7
Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
Warn: Project is vulnerable to: GHSA-x9w5-v3q2-3rhw
Warn: Project is vulnerable to: GHSA-w8qv-6jwh-64r5
Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
Warn: Project is vulnerable to: GHSA-f6v4-cf5j-vf3w
Warn: Project is vulnerable to: GHSA-phwq-j96m-2c2q
Warn: Project is vulnerable to: GHSA-ghr5-ch3p-vcr6
Warn: Project is vulnerable to: GHSA-434g-2637-qmqr
Warn: Project is vulnerable to: GHSA-49q7-c7j4-3p7m
Warn: Project is vulnerable to: GHSA-977x-g7h5-7qgw
Warn: Project is vulnerable to: GHSA-f7q4-pwc6-w24p
Warn: Project is vulnerable to: GHSA-fc9h-whq2-v747
Warn: Project is vulnerable to: GHSA-vjh7-7g9h-fjfh
Warn: Project is vulnerable to: GHSA-67mh-4wv8-2f99
Warn: Project is vulnerable to: GHSA-qw6h-vgh9-j6wx
Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27
Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh
Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42
Warn: Project is vulnerable to: GHSA-33f9-j839-rf8h
Warn: Project is vulnerable to: GHSA-c36v-fmgq-m8hx
Warn: Project is vulnerable to: GHSA-78xj-cgh5-2h22
Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp
Warn: Project is vulnerable to: GHSA-76p3-8jx3-jpfq
Warn: Project is vulnerable to: GHSA-3rfm-jhwj-7488
Warn: Project is vulnerable to: GHSA-hhq3-ff78-jv3g
Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm
Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55
Warn: Project is vulnerable to: GHSA-fq77-7p7r-83rj
Warn: Project is vulnerable to: GHSA-qpjv-v59x-3qc4
Warn: Project is vulnerable to: GHSA-g77x-44xx-532m
Warn: Project is vulnerable to: GHSA-gp8f-8m3g-qvj9
Warn: Project is vulnerable to: GHSA-7gfc-8cq8-jh5f
Warn: Project is vulnerable to: GHSA-7m27-7ghc-44w9
Warn: Project is vulnerable to: GHSA-f82v-jwr5-mffw
Warn: Project is vulnerable to: GHSA-3h52-269p-cp9r
Warn: Project is vulnerable to: GHSA-5rrq-pxf6-6jx5
Warn: Project is vulnerable to: GHSA-8fr3-hfg3-gpgp
Warn: Project is vulnerable to: GHSA-gf8q-jrpm-jvxq
Warn: Project is vulnerable to: GHSA-2r2c-g63r-vccr
Warn: Project is vulnerable to: GHSA-cfm4-qjh2-4765
Warn: Project is vulnerable to: GHSA-x4jg-mjrx-434g
Warn: Project is vulnerable to: GHSA-rp65-9cf3-cjxr
Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j
Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w
Warn: Project is vulnerable to: GHSA-h7cp-r72f-jxh6
Warn: Project is vulnerable to: GHSA-v62p-rq8g-8h59
Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j
Warn: Project is vulnerable to: GHSA-gcx4-mw62-g8wm
Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
Warn: Project is vulnerable to: GHSA-m6fv-jmcg-4jfg
Warn: Project is vulnerable to: GHSA-cm22-4g7w-348p
Warn: Project is vulnerable to: GHSA-g4rg-993r-mgx7
Warn: Project is vulnerable to: GHSA-mv48-hcvh-8jj8
Warn: Project is vulnerable to: GHSA-353f-5xf4-qw67
Warn: Project is vulnerable to: GHSA-4vvj-4cpr-p986 / GHSA-64vr-g452-qvp3
Warn: Project is vulnerable to: GHSA-9cwx-2883-4wfx
Warn: Project is vulnerable to: GHSA-vg6x-rcgg-rjx6
Warn: Project is vulnerable to: GHSA-x574-m823-4x7w
Warn: Project is vulnerable to: GHSA-4r4m-qw57-chr8
Warn: Project is vulnerable to: GHSA-xcj6-pq6g-qj4x
Warn: Project is vulnerable to: GHSA-356w-63v5-8wf4
Warn: Project is vulnerable to: GHSA-859w-5945-r5v3
Warn: Project is vulnerable to: GHSA-wr3j-pwj9-hqq6
Warn: Project is vulnerable to: GHSA-4v9v-hfq4-rm2v
Warn: Project is vulnerable to: GHSA-9jgg-88mc-972h
Warn: Project is vulnerable to: GHSA-x4c5-c7rf-jjgv
Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q
Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38
Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc
Warn: Project is vulnerable to: MAL-2024-11043
Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3

Score

5.3

/10

Last Scanned on 2025-06-30

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

Other packages similar to apollo-cache-inmemory

Other packages similar to apollo-cache-inmemory

apollo-cache-inmemory

Installations

Developer Guide

No

CommonJS

10.15.3

lerna/3.20.2/node@v10.15.3+x64 (darwin)

Score

Pull Requests

44

6,925

1,209

5,672

Issues

460

5,339

4,879

Releases

Languages

Developer

Download Statistics

GitHub Statistics

Bundle Size

31.87 kB

9.59 kB

Maintainers

Package Meta Information

Total Downloads

282,092,550

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

Peer Dependencies

title: InMemoryCache description: An explanation of apollo-cache-inmemory

Installation

Configuration

Normalization

Direct Cache Access

readQuery

readFragment

writeQuery` and `writeFragment

Recipes

Server side rendering

Updating the cache after a mutation

10

10

10

10

10

8

5

0

0

0

0

0

0

5.3

/10

title: InMemoryCache description: An explanation of `apollo-cache-inmemory`