Is @apollo/subgraph safe to use?

@apollo/subgraph has no known vulnerabilities on the latest version (2.14.0). DepScope rates its health at 86/100 (low risk).

What is the latest version of @apollo/subgraph?

The latest version of @apollo/subgraph is 2.14.0, released 2026-04-30.

Does @apollo/subgraph have known vulnerabilities?

No known vulnerabilities on the latest version of @apollo/subgraph.

Is @apollo/subgraph deprecated?

No, @apollo/subgraph is actively maintained. Latest release: 2.14.0 (2026-04-30).

What are alternatives to @apollo/subgraph?

Popular alternatives to @apollo/subgraph in npm include: semver, ansi-styles, minimatch, debug, brace-expansion.

What license does @apollo/subgraph use?

@apollo/subgraph is licensed under MIT.

@apollo/subgraph

npmv2.14.0

Apollo Subgraph Utilities

License MITpermissive182 versions4 maintainers2 deps727,552 weekly dl

apollographql/federation

/ 100

Health

safe to use

@apollo/[email protected] is safe to use (health: 86/100)

Health breakdown0 – 100

25/25

maintenance

14/20

popularity

25/25

security

15/15

maturity

7/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (2)

@apollo/cache-control-types @apollo/federation-internals

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@apollo/subgraph

@apollo/subgraph

npmv2.14.0

Apollo Subgraph Utilities

License MITpermissive182 versions4 maintainers2 deps727,552 weekly dl

apollographql/federation

/ 100

Health

safe to use

@apollo/[email protected] is safe to use (health: 86/100)

Health breakdown0 – 100

25/25

maintenance

14/20

popularity

25/25

security

15/15

maturity

7/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (2)

@apollo/cache-control-types @apollo/federation-internals

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@apollo/subgraph