@contractspec/lib.graphql-core
Shared GraphQL core: Pothos builder factory, scalars, tracing & complexity
51
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
farzim
Keywords
contractspecgraphqlpothosscalarstracingtypescript
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:@pothos/core | AI (dependencies): @pothos/core is a well-known GraphQL schema builder; unvetted status is a registry gap, not a risk signal. | ai | |
| dependencies | unvetted-dep:@pothos/plugin-relay | AI (dependencies): Legitimate official Pothos plugin; no risk signal. | ai | |
| dependencies | unvetted-dep:@pothos/plugin-tracing | AI (dependencies): Legitimate official Pothos plugin; no risk signal. | ai | |
| dependencies | unvetted-dep:@pothos/plugin-complexity | AI (dependencies): Legitimate official Pothos plugin; no risk signal. | ai | |
| dependencies | unvetted-dep:@pothos/plugin-dataloader | AI (dependencies): Legitimate official Pothos plugin; no risk signal. | ai | |
| phantom-deps | phantom-dep:@pothos/plugin-complexity | AI (phantom-deps): Pothos plugin re-exported as part of library surface; stable false positive. | ai | |
| phantom-deps | phantom-dep:graphql | AI (phantom-deps): graphql is a peer dep re-exported by this GraphQL library; not directly imported by design. | ai | |
| phantom-deps | phantom-dep:@pothos/plugin-dataloader | AI (phantom-deps): Pothos plugin re-exported as part of library surface; stable false positive. | ai | |
| phantom-deps | phantom-dep:@pothos/core | AI (phantom-deps): Pothos plugins are re-exported/re-used as peer deps; phantom detection is a false positive for this library. | ai | |
| phantom-deps | phantom-dep:graphql-scalars | AI (phantom-deps): graphql-scalars is a declared dep used in config/type re-exports; stable false positive for this package. | ai | |
| phantom-deps | phantom-dep:@pothos/plugin-relay | AI (phantom-deps): Pothos plugin re-exported as part of library surface; stable false positive. | ai | |
| phantom-deps | phantom-dep:@pothos/plugin-tracing | AI (phantom-deps): Pothos plugin re-exported as part of library surface; stable false positive. | ai |
Versions (showing 51 of 74)
| Version | Deps | Published |
|---|---|---|
| 3.7.22 | 8 / 3 | |
| 3.7.21 | 8 / 3 | |
| 3.7.20 | 8 / 3 | |
| 3.7.19 | 8 / 3 | |
| 3.7.18 | 8 / 3 | |
| 3.7.17 | 8 / 3 | |
| 3.7.16 | 8 / 3 | |
| 3.7.15 | 8 / 3 | |
| 3.7.14 | 8 / 3 | |
| 3.7.13 | 7 / 3 | |
| 3.7.12 | 7 / 3 | |
| 3.7.11 | 7 / 3 | |
| 3.7.10 | 7 / 3 | |
| 3.7.9 | 7 / 3 | |
| 3.7.8 | 7 / 3 | |
| 3.7.6 | 7 / 3 | |
| 3.7.5 | 7 / 3 | |
| 3.7.4 | 7 / 3 | |
| 3.7.3 | 7 / 3 | |
| 3.7.1 | 7 / 3 | |
| 3.7.0 | 7 / 3 | |
| 3.6.0 | 7 / 3 | |
| 3.5.5 | 7 / 3 | |
| 3.5.4 | 7 / 3 | |
| 3.5.3 | 7 / 3 | |
| 3.5.2 | 7 / 3 | |
| 3.5.0 | 7 / 3 | |
| 3.4.3 | 7 / 3 | |
| 3.4.2 | 7 / 3 | |
| 3.4.1 | 7 / 3 | |
| 3.4.0 | 7 / 3 | |
| 3.3.0 | 7 / 3 | |
| 3.2.0 | 7 / 3 | |
| 3.1.0 | 7 / 3 | |
| 3.0.0 | 7 / 3 | |
| 2.9.0 | 7 / 3 | |
| 2.8.0 | 7 / 3 | |
| 2.7.0 | 7 / 3 | |
| 2.6.0 | 7 / 3 | |
| 2.5.0 | 7 / 3 | |
| 2.4.0 | 7 / 3 | |
| 2.3.0 | 7 / 3 | |
| 2.2.0 | 7 / 3 | |
| 2.1.0 | 7 / 3 | |
| 2.0.0 | 7 / 3 | |
| 1.62.0 | 7 / 3 | |
| 1.61.0 | 7 / 3 | |
| 1.60.0 | 7 / 3 | |
| 1.59.0 | 7 / 3 | |
| 1.58.0 | 7 / 3 | |
| 1.57.0 | 7 / 4 |