:wrench: Utility library for GraphQL to build, stitch and mock GraphQL schemas in the SDL-first approach
This report summarizes scanner evidence for ardatan/graphql-tools, a TypeScript project with 5,434 GitHub stars. SynthScan examined 136,364 lines of code across 648 source files, recording 203 pattern matches distributed across 5 syntactic categories. The legacy adjusted pattern signal is 2.0 (Low pattern signal); it is not an authorship estimate.
Use the findings to ask whether maintainers can explain intent, verify dependencies, simplify unnecessary scaffolding, and focus review effort. Risk Payload v1 adds ownership, supply-chain, over-engineering, and review-effort vectors when available. These are prompts for human verification, not probabilities, security findings, or measured maintenance costs.
Use each vector to guide manual verification of the underlying findings.
Payload schema: 1.0.0 · Engine: 2.0.0 · Scoring: heuristic-density-v1 · Scan date: 2026-10-31.
Can maintainers explain intent, assumptions, and trade-offs? 189 finding(s).
Are imports declared and package/API names verified? 14 finding(s).
Are wrappers, guards, and repeated structures necessary? 176 finding(s).
Which changes need focused human review? 203 finding(s).
This chart tracks the legacy adjusted pattern score across scan runs. Changes can reflect source changes, scan coverage, or detector/scoring versions; they do not measure AI adoption or prove that a team refactored code. Compare runs only when their scoring versions are compatible. The dashed line tracks the raw pattern-hit count.
Groups findings by configured severity weight. Severity is not a confidence estimate, security rating, or proof that a package is missing. Verify imports against the project's manifests and inspect each finding in its local design context.
This horizontal bar chart shows where configured pattern scores accumulate across directories. Treat the bars as locations to inspect, not as evidence of authorship or code quality. Use the file-level findings to decide whether a directory needs a focused ownership, dependency, complexity, or review check.
The scanner identified 203 distinct pattern matches across 5 syntactic categories. Each entry below represents a discrete location in the source code where the engine recorded a detector match to inspect in context. Expand any category row to inspect the individual file paths, line numbers, code snippets, and the lexical context (CODE, COMMENT, or STRING) in which each match was detected.
Reading the findings table: The Severity column indicates the configured finding weight (CRITICAL / HIGH / MEDIUM / LOW). The Context column identifies whether the match occurred inside executable code, an inline comment, or a string literal — legacy comment-context matches receive a ×1.5 score weight. The ⚡ bolt icon marks clustered matches: three or more patterns within a 10-line window, each receiving an additional ×1.5 density multiplier under the legacy scoring model.
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | packages/webpack-loader/src/index.ts | 25 | function isNamedExecutableDefinition( | CODE |
| LOW | packages/webpack-loader/src/index.ts | 289 | async function collectImportedNamedDefinitions( | CODE |
| LOW | packages/webpack-loader/src/index.ts | 319 | function collectImportedNamedDefinitionsSync( | CODE |
| LOW | packages/load-files/src/matchFiles.ts | 202 | async function findDirectorySymlinkRoots(cwd: string, scanRoots: string[]): Promise<string[]> { | CODE |
| LOW | packages/load-files/src/matchFiles.ts | 240 | function findDirectorySymlinkRootsSync(cwd: string, scanRoots: string[]): string[] { | CODE |
| LOW | packages/optimize/tests/remove-empty-nodes.spec.ts | 106 | function normalizeAcrossGraphQLVersions(doc: DocumentNode) { | CODE |
| LOW | …/relay-compiler/lib/core/GraphQLDerivedFromMetadata.js | 19 | function getReaderSourceDefinitionName(node) { | CODE |
| LOW | …elay-compiler/lib/core/inferRootArgumentDefinitions.js | 41 | function inferRootArgumentDefinitions(context) { | CODE |
| LOW | …elay-compiler/lib/core/inferRootArgumentDefinitions.js | 158 | function transformFragmentArguments(context, transformed, fragment) { | CODE |
| LOW | packages/relay-compiler/lib/core/IRPrinter.js | 324 | function printFragmentArgumentDefinitions(schema, argumentDefinitions) { | CODE |
| LOW | …s/relay-compiler/lib/core/getIdentifierForSelection.js | 24 | function getIdentifierForSelection(schema, node) { | CODE |
| LOW | packages/relay-compiler/lib/core/ASTConvert.js | 40 | function convertASTDocumentsWithBase(schema, baseDocuments, documents, transform) { | CODE |
| LOW | packages/relay-compiler/lib/core/SchemaUtils.js | 23 | function isExecutableDefinitionAST(ast) { | CODE |
| LOW | packages/relay-compiler/lib/core/Schema.js | 213 | function hasConcreteTypeThatImplements(schema, type, interfaceType) { | CODE |
| LOW | packages/relay-compiler/lib/core/Schema.js | 2062 | function parseInputArgumentDefinitions(schema, args) { | CODE |
| LOW | packages/relay-compiler/lib/core/Schema.js | 2102 | function parseInputArgumentDefinitionsMap(schema, args) { | CODE |
| LOW | …lay-compiler/lib/core/getIdentifierForArgumentValue.js | 19 | function getIdentifierForArgumentValue(value) { | CODE |
| LOW | packages/relay-compiler/lib/core/CompilerError.js | 46 | function createNonRecoverableUserError(message, locations, nodes) { | CODE |
| LOW | packages/relay-compiler/lib/core/CompilerError.js | 208 | function highlightSourceAtLocation(source, location) { | CODE |
| LOW | packages/relay-compiler/lib/core/getFieldDefinition.js | 80 | function getFieldDefinitionLegacyImpl(schema, type, fieldName, fieldAST) { | CODE |
| LOW | …lay-compiler/lib/core/getNormalizationOperationName.js | 13 | function getNormalizationOperationName(name) { | CODE |
| LOW | packages/relay-compiler/lib/core/RelayParser.js | 1746 | function checkFragmentSpreadTypeCompatibility( | CODE |
| LOW | …compiler/lib/util/generateAbstractTypeRefinementKey.js | 16 | function generateAbstractTypeRefinementKey(schema, type) { | CODE |
| LOW | …s/relay-compiler/lib/util/argumentContainsVariables.js | 13 | function argumentContainsVariables(arg) { | CODE |
| LOW | packages/relay-compiler/lib/util/RelayCompilerCache.js | 73 | _proto.getOrCompute = function getOrCompute(key, compute) { | CODE |
| LOW | …ler/lib/language/javascript/RelayFlowBabelFactories.js | 29 | function exactObjectTypeAnnotation(props) { | CODE |
| LOW | …ler/lib/language/javascript/RelayFlowBabelFactories.js | 41 | function inexactObjectTypeAnnotation(props) { | CODE |
| LOW | …ler/lib/language/javascript/RelayFlowBabelFactories.js | 101 | function intersectionTypeAnnotation(types) { | CODE |
| LOW | …ler/lib/language/javascript/RelayFlowBabelFactories.js | 136 | function readOnlyObjectTypeProperty(key, value) { | CODE |
| LOW | …ler/lib/language/javascript/RelayFlowBabelFactories.js | 142 | function stringLiteralTypeAnnotation(value) { | CODE |
| LOW | …piler/lib/language/javascript/formatGeneratedModule.js | 36 | var formatGeneratedCommonjsModule = function formatGeneratedCommonjsModule(options) { | CODE |
| LOW | …r/lib/language/javascript/RelayFlowTypeTransformers.js | 19 | function getInputObjectTypeIdentifier(schema, typeID) { | CODE |
| LOW | …r/lib/language/javascript/RelayFlowTypeTransformers.js | 33 | function transformNonNullableScalarType(schema, type, state, objectProps) { | CODE |
| LOW | …r/lib/language/javascript/RelayFlowTypeTransformers.js | 49 | function transformGraphQLScalarType(typeName, state) { | CODE |
| LOW | …r/lib/language/javascript/RelayFlowTypeTransformers.js | 88 | function transformNonNullableInputType(schema, type, state) { | CODE |
| LOW | …iler/lib/codegen/createPrintRequireModuleDependency.js | 13 | function createPrintRequireModuleDependency() { | CODE |
| LOW | …compiler/lib/transforms/InlineDataFragmentTransform.js | 29 | function inlineDataFragmentTransform(context) { | CODE |
| LOW | …compiler/lib/transforms/SkipSplitOperationTransform.js | 23 | function skipSplitOperationTransform(context) { | CODE |
| LOW | …er/lib/transforms/FilterCompilerDirectivesTransform.js | 19 | function filterDirectivesTransform(context) { | CODE |
| LOW | …y-compiler/lib/transforms/FilterDirectivesTransform.js | 19 | function filterDirectivesTransform(context) { | CODE |
| LOW | …piler/lib/transforms/ApplyFragmentArgumentTransform.js | 62 | function applyFragmentArgumentTransform(context) { | CODE |
| LOW | …ler/lib/transforms/ValidateUnusedVariablesTransform.js | 32 | function validateUnusedVariablesTransform(context) { | CODE |
| LOW | …ler/lib/transforms/ValidateGlobalVariablesTransform.js | 30 | function validateGlobalVariablesTransform(context) { | CODE |
| LOW | …mpiler/lib/transforms/SkipClientExtensionsTransform.js | 15 | function skipClientExtensionTransform(context) { | CODE |
| LOW | …ages/relay-compiler/lib/transforms/FlattenTransform.js | 376 | function shouldFlattenInlineFragment(schema, fragment, state, type) { | CODE |
| LOW | …compiler/lib/transforms/SkipRedundantNodesTransform.js | 122 | function skipRedundantNodesTransform(context) { | CODE |
| LOW | …r/lib/transforms/ValidateRequiredArgumentsTransform.js | 30 | function validateRequiredArguments(context) { | CODE |
| LOW | …r/lib/transforms/ValidateRequiredArgumentsTransform.js | 101 | function validateRequiredArgumentsOnNode(schema, node, definitionArgs, rootNode) { | CODE |
| LOW | …ompiler/lib/transforms/RefetchableFragmentTransform.js | 49 | function refetchableFragmentTransform(context) { | CODE |
| LOW | …ompiler/lib/transforms/RefetchableFragmentTransform.js | 159 | function extractConnectionMetadata(schema, fragment) { | CODE |
| LOW | …ompiler/lib/transforms/SkipUnreachableNodeTransform.js | 36 | function skipUnreachableNodeTransform(context) { | CODE |
| LOW | …ib/transforms/ValidateServerOnlyDirectivesTransform.js | 32 | function validateServerOnlyDirectives(context) { | CODE |
| LOW | …ib/transforms/ValidateServerOnlyDirectivesTransform.js | 90 | function visitTransformedDirective(node, state) { | CODE |
| LOW | …y-compiler/lib/transforms/GenerateTypeNameTransform.js | 35 | function generateTypeNameTransform(context) { | CODE |
| LOW | …ompiler/lib/transforms/SkipUnusedVariablesTransform.js | 28 | function skipUnusedVariablesTransform(context) { | CODE |
| LOW | …elay-compiler/lib/transforms/query-generators/utils.js | 71 | function buildOperationArgumentDefinitions(argumentDefinitions) { | CODE |
| LOW | packages/merge/src/typedefs-mergers/directives.ts | 12 | function collectMultiInstanceDirectiveNames( | CODE |
| LOW | …ges/resolvers-composition/src/resolvers-composition.ts | 26 | function isScalarTypeConfiguration(config: any): config is GraphQLScalarTypeConfig<any, any> { | CODE |
| LOW | packages/utils/tests/mapSchema.test.ts | 208 | function addObjectTypeToSetDirective( | CODE |
| LOW | packages/utils/tests/mapSchema.test.ts | 240 | function recordSchemaDirectiveUses( | CODE |
| 116 more matches not shown… | ||||
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| HIGH | packages/webpack-loader/tests/loader.test.ts | 61 | print(parse(docStr)), | CODE |
| HIGH | packages/webpack-loader/tests/loader.test.ts | 124 | print( | CODE |
| HIGH | packages/webpack-loader/tests/loader.test.ts | 133 | print( | CODE |
| HIGH | packages/webpack-loader/tests/loader.test.ts | 163 | print( | CODE |
| HIGH | packages/webpack-loader/tests/loader.test.ts | 178 | print( | CODE |
| HIGH | packages/webpack-loader/tests/loader.test.ts | 189 | print( | CODE |
| HIGH | packages/webpack-loader/tests/loader.test.ts | 228 | print( | CODE |
| HIGH | packages/webpack-loader/tests/loader.test.ts | 243 | print( | CODE |
| HIGH | packages/webpack-loader/tests/loader.test.ts | 254 | print( | CODE |
| HIGH | packages/webpack-loader/tests/loader.test.ts | 288 | print( | CODE |
| HIGH | packages/webpack-loader/tests/loader.test.ts | 504 | print( | CODE |
| HIGH | packages/webpack-loader/tests/loader.test.ts | 513 | print( | CODE |
| HIGH | packages/webpack-loader/tests/loader.test.ts | 583 | print( | CODE |
| HIGH | packages/webpack-loader/tests/loader.test.ts | 592 | print( | CODE |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| LOW | website/next-env.d.ts | 1 | /// <reference types="next" /> | COMMENT |
| LOW | …elay-compiler/lib/core/inferRootArgumentDefinitions.js | 41 | function inferRootArgumentDefinitions(context) { | COMMENT |
| LOW | packages/utils/src/addTypes.ts | 1 | // addTypes uses toConfig to create a new schema with a new or replaced | COMMENT |
| LOW | packages/utils/src/heal.ts | 21 | isUnionType, | COMMENT |
| LOW | packages/utils/src/heal.ts | 41 | // | COMMENT |
| LOW | packages/load/tests/loaders/schema/test-files/13.tsx | 21 | // query IndexQuery { | COMMENT |
| LOW | packages/load/tests/loaders/schema/test-files/12.tsx | 21 | // query IndexQuery { | COMMENT |
| LOW | packages/executor/src/execution/execute.ts | 541 | } | COMMENT |
| LOW | packages/import/tests/schema/import-schema.spec.ts | 481 | `; | COMMENT |
| LOW | packages/import/src/index.ts | 381 | // ``` | COMMENT |
| LOW | .github/workflows/codeql-analysis.yml | 1 | # For most projects, this workflow file will not need changing; you simply need | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | packages/relay-compiler/lib/bin/RelayCompilerBin.js | 147 | // Apply externally loaded config through the yargs API so that we can leverage yargs' defaults and have them show up | COMMENT |
| Severity | File | Line | Snippet | Context |
|---|---|---|---|---|
| MEDIUM | .github/workflows/codeql-analysis.yml | 60 | # If you are analyzing a compiled language, you can modify the 'build-mode' for that language to customize how | COMMENT |