{"package":"apollo-server-core","ecosystem":"npm","latest_version":"3.13.0","description":"Core engine for Apollo GraphQL server","license":"MIT","homepage":"https://github.com/apollographql/apollo-server#readme","repository":"https://github.com/apollographql/apollo-server","downloads_weekly":1000244,"health":{"score":29,"risk":"critical","breakdown":{"maintenance":0,"popularity":17,"security":25,"maturity":15,"community":2},"deprecated":true,"max_score":100},"vulnerabilities":{"count":2,"critical":0,"high":0,"medium":0,"low":2,"details":[{"vuln_id":"GHSA-8r69-3cvp-wxc3","severity":"unknown","summary":"Batched HTTP requests may set incorrect `cache-control` response header","affected_versions":">=0","fixed_version":"4.1.0","source":"osv","published_at":"2022-11-02T18:18:10Z"},{"vuln_id":"GHSA-9q82-xgwf-vj6h","severity":"unknown","summary":"Apollo Server: Browser bug allows for bypass of XS-Search (read-only Cross-Site Request Forgery) prevention","affected_versions":">=0","fixed_version":"5.5.0","source":"osv","published_at":"2026-03-26T21:53:10Z"}]},"versions":{"latest":"3.13.0","total_count":314,"recent":["3.6.8","3.7.0","3.8.0","3.8.1","2.25.4","3.8.2","3.9.0","3.10.0","3.10.1","2.26.0","3.10.2","3.10.3","2.26.1","3.10.4","3.11.0","3.11.1","3.12.0","2.26.2","3.12.1","3.13.0"]},"metadata":{"deprecated":true,"deprecated_message":"The `apollo-server-core` package is part of Apollo Server v2 and v3, which are now end-of-life (as of October 22nd 2023 and October 22nd 2024, respectively). This package's functionality is now found in the `@apollo/server` package. See https://www.apollographql.com/docs/apollo-server/previous-versions/ for more details.","maintainers_count":1,"first_published":"2017-07-17T23:31:05.461Z","last_published":"2023-11-14T00:17:04.028Z","dependencies_count":23,"dependencies":["uuid","sha.js","loglevel","lru-cache","async-retry","graphql-tag","whatwg-mimetype","apollo-datasource","apollo-server-env","@graphql-tools/mock","@josephg/resolvable","apollo-server-types","@apollo/utils.logger","apollo-server-errors","@graphql-tools/schema","node-abort-controller","apollo-reporting-protobuf","apollo-server-plugin-base","fast-json-stable-stringify","@apollo/utils.keyvaluecache","@apollographql/apollo-tools","@apollo/utils.usagereporting","@apollographql/graphql-playground-html"]},"recommendation":{"action":"find_alternative","issues":["Low health score (29/100)","Package is deprecated"],"use_version":"3.13.0","version_hint":"Update to >= 5.5.0 to fix known vulnerabilities","summary":"apollo-server-core is deprecated — find an alternative"},"requested_version":null,"_cache":"miss","_response_ms":759,"_powered_by":"depscope.dev — free package intelligence for AI agents"}