Is graphql-yoga safe to use?

graphql-yoga has no known vulnerabilities on the latest version (5.21.0). DepScope rates its health at 85/100 (low risk).

What is the latest version of graphql-yoga?

The latest version of graphql-yoga is 5.21.0, released 2026-04-04.

Does graphql-yoga have known vulnerabilities?

No known vulnerabilities on the latest version of graphql-yoga.

Is graphql-yoga deprecated?

No, graphql-yoga is actively maintained. Latest release: 5.21.0 (2026-04-04).

What are alternatives to graphql-yoga?

Popular alternatives to graphql-yoga in npm include: semver, ansi-styles, debug, minimatch, brace-expansion.

What license does graphql-yoga use?

graphql-yoga is licensed under MIT.

graphql-yoga

npmv5.21.0

License MITpermissive4484 versions2 maintainers12 deps1,205,406 weekly dl

graphql-hive/graphql-yoga

/ 100

Health

safe to use

[email protected] is safe to use (health: 85/100)

Health breakdown0 – 100

25/25

maintenance

17/20

popularity

25/25

security

15/15

maturity

3/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

166.3 KBminified

49.5 KB gzipped

12 direct dependencies

ESM

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (12)

tslib lru-cache @envelop/core @whatwg-node/fetch @whatwg-node/server @graphql-tools/utils @graphql-yoga/logger @graphql-tools/schema @graphql-tools/executor @envelop/instrumentation @graphql-yoga/subscription @whatwg-node/promise-helpers

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/graphql-yoga