Is apollo-server-core safe to use?

apollo-server-core has 2 known vulnerabilities on the latest version (3.13.0). DepScope rates its health at 33/100 (critical risk).

What is the latest version of apollo-server-core?

The latest version of apollo-server-core is 3.13.0, released 2023-11-14.

Does apollo-server-core have known vulnerabilities?

Yes. apollo-server-core has 2 known vulnerabilities. See depscope.dev/pkg/npm/apollo-server-core for details.

Is apollo-server-core deprecated?

Yes, apollo-server-core is deprecated: The `apollo-server-core` package is part of Apollo Server v2 and v3, which are now end-of-life (as of October 22nd 2023 and October 22nd 2024, respectively). This package's functionality is now found in the `@apollo/server` package. See https://www.apollographql.com/docs/apollo-server/previous-versions/ for more details. Consider using semver instead.

What are alternatives to apollo-server-core?

Popular alternatives to apollo-server-core in npm include: semver, ansi-styles, debug, minimatch, brace-expansion.

What license does apollo-server-core use?

apollo-server-core is licensed under MIT.

apollo-server-core

npmv3.13.0deprecated

Core engine for Apollo GraphQL server

License MITpermissive314 versions1 maintainers23 deps1,012,582 weekly dl

apollographql/apollo-server

/ 100

Health

find alternative

apollo-server-core is deprecated — find an alternative

Update to >= 5.5.0 to fix known vulnerabilities

Low health score (33/100)
Package is deprecated

Health breakdown0 – 100

0/25

maintenance

17/20

popularity

21/25

security

15/15

maturity

10/15

community

Vulnerabilities

2 medium

Advisories (2)

Severity	ID	Summary	Fixed in
medium	GHSA-8r69-3cvp-wxc3	Batched HTTP requests may set incorrect `cache-control` response header	4.1.0
medium	GHSA-9q82-xgwf-vj6h	Apollo Server: Browser bug allows for bypass of XS-Search (read-only Cross-Site Request Forgery) prevention	5.5.0

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/apollo-server-core