apollo-errors
Machine-readable custom errors for Apollostack's GraphQL server
14
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.
Maintainers
thebigredgeek
Keywords
apollostackgraphqlapollo-serverapollo-clienterrorapi
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:es6-error | AI (dependencies): es6-error is a well-known, widely-used utility for ES6 custom error classes with no known security issues; stable false positive for this package. | ai | |
| dependencies | unvetted-dep:assert | AI (dependencies): assert is a Node.js core module polyfill; widely used and benign for this package's purpose. | ai | |
| dependencies | unvetted-dep:extendable-error | AI (dependencies): extendable-error is a small, well-known utility for custom error classes; appropriate and expected for apollo-errors. | ai | |
| provenance | no-provenance | AI (provenance): Package is 3448 days old; lack of provenance is expected for packages predating Sigstore adoption. | ai |