Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on May 23, 2024 via pnpm

graphql-config 3.3.0

The easiest way to configure your development environment with your GraphQL schema (supported by most tools, editors & IDEs)
Package summary
Share
6
issues
1
critical severity
license
1
3
high severity
vulnerability
2
meta
1
2
moderate severity
vulnerability
2
7
licenses
122
MIT
8
ISC
5
0BSD
6
other licenses
BSD-3-Clause
3
Apache-2.0
1
N/A
1
BSD-2-Clause
1
Package created
20 Jul 2017
Version published
19 May 2021
Maintainers
4
Total deps
141
Direct deps
12
License
MIT

Issues

6

1 critical severity issue

critical
Recommendation: Check the package code and files for license information
via: @graphql-tools/load@6.2.8 & others
Collapse
Expand

3 high severity issues

high
Recommendation: Upgrade to version 2.6.7 or later
via: @graphql-tools/url-loader@6.10.1
Recommendation: Upgrade to version 3.0.5 or later
via: minimatch@3.0.4
via: @graphql-tools/url-loader@6.10.1
Collapse
Expand

2 moderate severity issues

moderate
Recommendation: Upgrade to version 3.1.5 or later
via: @graphql-tools/url-loader@6.10.1
Recommendation: Upgrade to version 7.4.6 or later
via: @graphql-tools/url-loader@6.10.1
Collapse
Expand

Licenses

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
122 Packages, Including:
@ardatan/aggregate-error@0.0.6
@babel/code-frame@7.24.2
@babel/helper-validator-identifier@7.24.5
@babel/highlight@7.24.5
@endemolshinegroup/cosmiconfig-typescript-loader@3.0.2
@graphql-tools/batch-execute@7.1.2
@graphql-tools/delegate@7.1.5
@graphql-tools/graphql-file-loader@6.2.7
@graphql-tools/import@6.7.18
@graphql-tools/json-file-loader@6.2.6
@graphql-tools/load@6.2.8
@graphql-tools/merge@6.2.17
@graphql-tools/merge@8.3.1
@graphql-tools/schema@7.1.5
@graphql-tools/schema@8.5.1
@graphql-tools/url-loader@6.10.1
@graphql-tools/utils@7.10.0
@graphql-tools/utils@8.0.2
@graphql-tools/utils@8.9.0
@graphql-tools/utils@9.2.1
@graphql-tools/wrap@7.0.8
@graphql-typed-document-node/core@3.2.0
@microsoft/fetch-event-source@2.0.1
@nodelib/fs.scandir@2.1.5
@nodelib/fs.stat@2.0.5
@nodelib/fs.walk@1.2.8
@types/node@20.12.12
@types/parse-json@4.0.2
@types/websocket@1.0.2
abort-controller@3.0.0
ansi-styles@3.2.1
arg@4.1.3
array-union@2.1.0
asynckit@0.4.0
backo2@1.0.2
balanced-match@1.0.2
base64-js@1.5.1
brace-expansion@1.1.11
braces@3.0.3
buffer-from@1.1.2
buffer@5.7.1
callsites@3.1.0
camel-case@4.1.2
chalk@2.4.2
color-convert@1.9.3
color-name@1.1.3
combined-stream@1.0.8
concat-map@0.0.1
cosmiconfig-toml-loader@1.0.0
cosmiconfig@7.0.0

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
8 Packages, Including:
@iarna/toml@2.2.5
fastq@1.17.1
glob-parent@5.1.2
make-error@1.3.6
minimatch@3.0.4
picocolors@1.0.1
remove-trailing-separator@1.1.0
yaml@1.10.2

BSD Zero Clause License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
include-copyright
include-license
include-original
Cannot
hold-liable
Must
5 Packages, Including:
tslib@2.0.3
tslib@2.1.0
tslib@2.2.0
tslib@2.3.1
tslib@2.6.2

BSD 3-Clause "New" or "Revised" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
use-trademark
hold-liable
Must
include-copyright
include-license
3 Packages, Including:
diff@4.0.2
ieee754@1.2.1
source-map@0.6.1

Apache License 2.0

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
use-patent-claims
place-warranty
Cannot
hold-liable
use-trademark
Must
include-copyright
include-license
state-changes
include-notice
1 Packages, Including:
typescript@5.4.5

N/A

N/A
1 Packages, Including:
valid-url@1.0.9

BSD 2-Clause "Simplified" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
hold-liable
Must
include-copyright
include-license
1 Packages, Including:
webidl-conversions@3.0.1
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

12
All Dependencies CSV
β“˜ This is a list of graphql-config 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
@endemolshinegroup/cosmiconfig-typescript-loader3.0.24.37 kBMIT
prod
@graphql-tools/graphql-file-loader6.2.74.66 kBMIT
prod
@graphql-tools/json-file-loader6.2.64.42 kBMIT
prod
@graphql-tools/load6.2.849.71 kBMIT
prod
1
@graphql-tools/merge6.2.1746.54 kBMIT
prod
@graphql-tools/url-loader6.10.144.76 kBMIT
prod
1
2
2
@graphql-tools/utils7.10.0358.41 kBMIT
prod
cosmiconfig-toml-loader1.0.01.77 kBMIT
prod
cosmiconfig7.0.026.32 kBMIT
prod peer
graphql15.8.0424.64 kBMIT
prod peer
minimatch3.0.411.16 kBISC
prod
1
string-env-interpolation1.0.11.54 kBMIT
prod

Visualizations