Is this still mainated? What are good alternatives?

[AdamZaczek]

Hey! I'm looking for graphql api protection tools and this looks neat but I'm worried about using unmaintained dep in my app.

[ivome]

Check out https://github.com/slicknode/graphql-query-complexity

This does pretty much everything this library does and more. It is fully customizable and extensible so you can bring your own logic and combine it with the built-in estimators.
I'm actively maintaining this, it has more than 500k downloads/month and it is used by the big GraphQL frameworks like TypeGraphQL, NestJS, Nexus.

[Bessonov]

Hey @ivome , thank you for the link. Can it be used as a proxy? For example, I want to prevent expensive queries to reach hasura.

[ivome]

@Bessonov If you put a NodeJS proxy in front of it, you can just calculate the complexity and then only forward the queries that meet the criteria: https://github.com/slicknode/graphql-query-complexity#calculate-query-complexity

Since Hasura has a generated GraphQL API, you could also create an estimator that adds all the configuration automatically. That's what we're doing at Slicknode