ActionRank

GraphQL Inspector

Actively maintained

kamilkisiela/graphql-inspector · MIT

🕵️‍♀️ Validate schema, get schema change notifications, validate operations, find breaking changes, look for similar types, schema coverage

1.8k starsLast commit 1 months agoLatest v4.0.0
C
62
/ 100
Security 51Maintenance 89Popularity 67Reliability 30

Security signals

OpenSSF Scorecard5.1 / 10
SECURITY.md presentNo
Immutable releasesNot enabled
Known vulnerabilitiesNone on record

How to use it safely

Recommended: pin to commit SHA
uses: kamilkisiela/graphql-inspector@c0ecb19ad21de709b80ed897041a4976c079c718 # v4.0.0

Mutable tags like v4.0.0 can be rewritten to point at malicious commits. Pinning to the full commit SHA is the only reference GitHub guarantees immutable.

Full workflow example
steps:
  - uses: kamilkisiela/graphql-inspector@c0ecb19ad21de709b80ed897041a4976c079c718 # v4.0.0

Score breakdown

Security (35%)51
Popularity (20%)67
Maintenance (30%)89
Reliability (15%)30