GraphiQL & the GraphQL LSP Reference Ecosystem for building browser & IDE tools.
Installations
npm install codemirror-graphqlReleases
@graphiql/toolkit@0.11.1
Published on 22 Nov 2024
@graphiql/react@0.27.0
Published on 09 Nov 2024
@graphiql/plugin-explorer@3.2.3
Published on 09 Nov 2024
@graphiql/plugin-code-exporter@3.1.3
Published on 09 Nov 2024
graphiql@3.7.2
Published on 09 Nov 2024
cm6-graphql@0.2.0
Published on 02 Nov 2024
Developer
graphql
Developer Guide
Module System
CommonJS
Min. Node Version
Typescript Support
No
Node Version
18.20.4
NPM Version
10.7.0
Statistics
16,127 Stars
3,958 Commits
1,727 Forks
235 Watching
78 Branches
295 Contributors
Updated on 27 Nov 2024
Languages
TypeScript (90.49%)
JavaScript (4.6%)
CSS (3.84%)
HTML (0.44%)
Shell (0.29%)
EJS (0.12%)
Python (0.06%)
Astro (0.05%)
PHP (0.04%)
Vue (0.03%)
Reason (0.02%)
Scala (0.01%)
Svelte (0.01%)
Total Downloads
Cumulative downloads
Total Downloads
56,410,890
Last day
-12%
79,867
Compared to previous day
Last week
-5.4%
385,522
Compared to previous week
Last month
38.9%
1,694,571
Compared to previous month
Last year
-7.4%
14,711,271
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
2
Peer Dependencies
3
Dev Dependencies
6
GraphQL IDE Monorepo
Security Notice: All versions of
graphiql<1.4.7are vulnerable to an XSS attack in cases where the GraphQL server to which the GraphiQL web app connects is not trusted. Learn more in the graphiqlsecuritydocs directory
Looking for the GraphiQL Docs?: This is the root of the monorepo! The full GraphiQL docs are located at
packages/graphiql
Overview
GraphiQL is the reference implementation of this monorepo, GraphQL IDE, an official project under the GraphQL Foundation. The code uses the permissive MIT license.
Whether you want a simple GraphiQL IDE instance for your server, or a more advanced web or desktop GraphQL IDE experience for your framework or plugin, or you want to build an IDE extension or plugin, you've come to the right place!
The purpose of this monorepo is to give the GraphQL Community:
- a to-specification official language service (see: API Docs)
- a comprehensive LSP server and CLI service for use with IDEs
- a codemirror mode
- a monaco mode (in the works)
- an example of how to use this ecosystem with GraphiQL.
- examples of how to implement or extend GraphiQL.
graphiql
/ˈɡrafək(ə)l/ A graphical interactive in-browser GraphQL IDE.
Try the live demo. We also have
a demo using our latest netlify build for
the main branch.
The GraphiQL IDE, implemented in React, currently using GraphQL mode for CodeMirror & GraphQL Language Service.
Learn more about
GraphiQL in packages/graphiql/README.md
monaco-graphql
Provides monaco editor with a powerful, schema-driven graphql language mode.
Uses the graphql-language-servicedirectly.
See the webpack example for a plain javascript demo using GitHub API
codemirror-graphql
Provides CodeMirror 5 with a parser mode for GraphQL along with a live linter and
typeahead hinter powered by your GraphQL Schema. Uses the
graphql-language-service.
cm6-graphql
Provides CodeMirror 6 with a full-featured language mode for GraphQL. Uses the graphql-language-service.
graphql-language-service
Provides language services for
graphql-language-service-server
codemirror-graphql and
monaco-graphql. Previously published separately as
the now-retired graphql-language-service-interface,
graphql-language-service-parser, graphql-language-service-utils and
graphql-language-service-types.
graphql-language-service-server
Provides language services for LSP-based IDE extensions using the
graphql-language-service
graphql.vscode-graphql
An example implementation of graphql-language-service-server for Visual Studio
Code. Available
on the marketplace.
OVSX fix is pending.
graphql.vscode-graphql-syntax
A new syntax highlighting-only extension for vscode to be used by other vscode extensions.
graphql.vscode-graphql-execution
An extension for vscode-graphql that allows inline query execution.
graphql-language-service-cli
Provides a CLI for the language service server.
Browser & Runtime Support
Many of these packages need to work in multiple environments.
By default, all typescript packages target es6.
graphql-language-service-server and graphql-language-service-cli are made
for the node runtime, so they target es2017
codemirror-graphql and the graphiql browser bundle use the
.browserslistrc, which targets modern browsers to keep
bundle size small and keep the language services performant where async/await is
used, and especially to avoid the requirement of regenerator-runtime or
special babel configuration.
.browserslistrc:
last 2 versions
Firefox ESR
not dead
not IE 11
not ios 10
maintained node versions
To be clear, we do not support Internet Explorer or older versions of evergreen browsers.
Development
To get setup for local development of this monorepo, refer to DEVELOPMENT.md
Contributing to this repo
This is an open source project, and we welcome contributions. Please see CONTRIBUTING.md for details on how to contribute.
This repository is managed by EasyCLA. Project participants must sign the free GraphQL Specification Membership agreement before making a contribution. You only need to do this one time, and it can be signed by individual contributors or their employers.
To initiate the signature process please open a PR against this repo. The EasyCLA bot will block the merge if we still need a membership agreement from you.
Please note that EasyCLA is configured to accept commits from certain GitHub bots. These are approved on an exception basis once we are confident that any content they create is either unlikely to consist of copyrightable content or else was written by someone who has already signed the CLA (e.g., a project maintainer). The bots that have currently been approved as exceptions are:
- github-actions (exclusively for the
changesetsAction)
You can find detailed information here. If you have issues, please email operations@graphql.org.
Maintainers
Maintainers of this repository regularly review PRs and issues and help advance the GraphiQL roadmap
Alumni
Without these amazing past maintainers, where would we be?!
- @leebyron - original author of all libraries
- @asiandrummer - original creator of GraphiQL
- @wincent - early co-author and maintainer
- @lostplan - maintained the language service ecosystem until about 2017
- @IvanGoncharov - maintainer and transitional mentor to @acao and others
- @orta - has helped with so many parts of the project over the years, and provided the original redesign!
- @divyenduz - the original creator of
vscode-graphql, and contributor to much of the ecosystem. Thanks Divy!
Active
Maintainers who are currently active (to varying degrees, please contact us via our discord channels!):
- @imolorhe
- @yoshiakis
- @urigo
- @timsuchanek
- @thomasheyenbrock
- @n1ru4l
- @acao
- @stonexer
- @B2o5T
- @dotansimha
- @saihaj
- @jonathanawesome
- @cshaver
Thank you graphql community for all the help & support! I did it all for you, and I couldn't have done it without you ❤️ - @acao
Fielding Proposals!
The door is open for proposals for the new GraphiQL Plugin API, and other ideas
on how to make the rest of the IDE ecosystem more performant, scalable,
interoperable and extensible. Feel free to open a PR to create a document in the
/proposals/ directory. Eventually we hope to move these to a repo that serves
this purpose.
Community
- Discord
-
Most discussion outside of GitHub happens on the GraphQL
Discord Server
- Twitter - @GraphiQL and #GraphiQL
- GitHub - Create feature requests, discussions issues and bugs above
- Working Group - Yes, you're invited! Monthly planning/decision making meetings, and working sessions every two weeks on zoom! Learn more.
No vulnerabilities found.
Reason
30 commit(s) and 13 issue activity found in the last 90 days -- score normalized to 10
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: MIT License: LICENSE:0
Reason
security policy file detected
Details
- Info: security policy file detected: SECURITY.md:1
- Warn: no linked content found
- Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1
- Info: Found text in security policy: SECURITY.md:1
Reason
Found 8/26 approved changesets -- score normalized to 3
Reason
badge detected: InProgress
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yml:10
- Warn: no topLevel permission defined: .github/workflows/main-test.yml:1
- Info: topLevel 'contents' permission set to 'read': .github/workflows/pr-graphql-compat-check.yml:18
- Warn: no topLevel permission defined: .github/workflows/pr.yml:1
- Info: found token with 'none' permissions: .github/workflows/release.yml:1
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/main-test.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/main-test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main-test.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/main-test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main-test.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/main-test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main-test.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/main-test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main-test.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/main-test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main-test.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/main-test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main-test.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/main-test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main-test.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/main-test.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/main-test.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/main-test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-graphql-compat-check.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr-graphql-compat-check.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-graphql-compat-check.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr-graphql-compat-check.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-graphql-compat-check.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr-graphql-compat-check.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:157: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:164: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:168: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:178: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:184: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:257: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:258: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:80: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:115: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:203: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:208: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr.yml:218: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr.yml:227: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr.yml:242: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/pr.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/release.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/graphql/graphiql/release.yml/main?enable=pin
- Info: 0 out of 51 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 10 third-party GitHubAction dependencies pinned
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 30 are checked with a SAST tool
Reason
41 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-v88g-cgmw-v5xw
- Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw
- Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx
- Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx
- Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-phwq-j96m-2c2q
- Warn: Project is vulnerable to: GHSA-ghr5-ch3p-vcr6
- Warn: Project is vulnerable to: GHSA-765h-qjxv-5f44
- Warn: Project is vulnerable to: GHSA-f2jv-r9rf-7988
- Warn: Project is vulnerable to: GHSA-vfrc-7r7c-w9mx
- Warn: Project is vulnerable to: GHSA-7wwv-vh3v-89cq
- Warn: Project is vulnerable to: GHSA-43f8-2h32-f4cj
- Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27
- Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96
- Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj
- Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf
- Warn: Project is vulnerable to: GHSA-7wpw-2hjm-89gp
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
- Warn: Project is vulnerable to: GHSA-c59h-r6p8-q9wc
- Warn: Project is vulnerable to: GHSA-fq54-2j52-jc42
- Warn: Project is vulnerable to: GHSA-77r5-gw3j-2mpf
- Warn: Project is vulnerable to: GHSA-fr5h-rqp8-mj6g
- Warn: Project is vulnerable to: GHSA-g77x-44xx-532m
- Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j
- Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j
- Warn: Project is vulnerable to: GHSA-gcx4-mw62-g8wm
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-m6fv-jmcg-4jfg
- Warn: Project is vulnerable to: GHSA-jv35-xqg7-f92r
- Warn: Project is vulnerable to: GHSA-4rq4-32rv-6wp6
- Warn: Project is vulnerable to: GHSA-64g7-mvw6-v9qj
- Warn: Project is vulnerable to: GHSA-7p7h-4mm5-852v
- Warn: Project is vulnerable to: GHSA-4vvj-4cpr-p986
- Warn: Project is vulnerable to: GHSA-6fc8-4gx4-v693
- Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q
- Warn: Project is vulnerable to: GHSA-776f-qx25-q3cc
- Warn: Project is vulnerable to: GHSA-m95q-7qp3-xv42
Score
4.4
/10
Last Scanned on 2024-11-18
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn MoreOther packages similar to codemirror-graphql
@apollographql/graphql-language-service-parser
An online parser for GraphQL for use in syntax-highlighters and code intelligence tools
graphql-language-service
The official, runtime independent Language Service for GraphQL
cm6-graphql
GraphQL language support for CodeMirror 6
codemirror
Basic configuration for the CodeMirror code editor