npm package report

Is @apollo/server safe?

Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.

cyberxyz.io/packages/npm/apollo__server

npm packagelast checked 2026-09-19

@apollo/server · verdict ALLOW · no known risk

0.6/10

XYZ SCORE

SUMMARY

Verdict ALLOW · 14 graph-tracked dependencies · provenance: unknown

SIGNALS

Advisory HistoryclearOK

5 historical advisory record(s) on this package (max severity LOW). Add a version to check whether it is affected.

Commit-Level AnalysisclearOK

3 unconfirmed pattern hit(s) in watched commit history; none verified as malicious.

DEPENDENCIES

@apollo/cache-control-types@^1.0.3clean

@apollo/utils.fetcher@^3.0.0clean

@apollo/utils.withrequired@^3.0.0clean

async-retry@^1.2.1clean

body-parser@^2.2.2clean

content-type@^1.0.5clean

cors@^2.8.5clean

finalhandler@^2.1.0clean

@graphql-tools/schema@^10.0.0clean

loglevel@^1.6.8clean

lru-cache@^11.1.0clean

negotiator@^1.0.0clean

uuid@^11.1.0clean

whatwg-mimetype@^4.0.0clean

PACKAGE @apollo/serverECOSYSTEM npmDECISION ALLOW

Weekly downloads

10M

GitHub stars

Centrality tier

tier 2

Build provenance

unknown

Direct dependencies

Baked snapshot · run a live check for the current verdict · browse all packages