graphql-safe-guards 1.0.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Mateo Diaz
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,30 @@
+# graphql-safe-guards
+
+Protect your GraphQL API with a single import.
+
+## Installation
+
+npm install graphql-safe-guards
+
+## Usage
+
+```ts
+import { graphqlSafeGuards } from "graphql-safe-guards";
+
+const server = new ApolloServer({
+  schema,
+  validationRules: graphqlSafeGuards({
+    depth: 3,
+    complexity: 10,
+  }),
+});
+```
+
+What it includes
+
+- Query depth limiting
+- Query complexity limiting
+- Sensible defaults
+- Framework agnostic
+
+---

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+import type { ValidationRule } from "graphql";
+import { GraphQLSafeGuardsOptions } from "./types";
+export declare function graphqlSafeGuards(options?: GraphQLSafeGuardsOptions): ValidationRule[];

package/dist/index.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.graphqlSafeGuards = graphqlSafeGuards;
+const graphql_safe_depth_1 = require("graphql-safe-depth");
+const graphql_complexity_validation_1 = require("graphql-complexity-validation");
+function graphqlSafeGuards(options = {}) {
+    const { depth = 5, complexity = 100 } = options;
+    return [
+        (0, graphql_safe_depth_1.createDepthLimitRule)({ maxDepth: depth }),
+        (0, graphql_complexity_validation_1.createComplexityLimitRule)({ maxComplexity: complexity }),
+    ];
+}

package/dist/types.d.ts

@@ -0,0 +1,4 @@
+export interface GraphQLSafeGuardsOptions {
+    depth?: number;
+    complexity?: number;
+}

package/dist/types.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/package.json

@@ -0,0 +1,45 @@
+{
+  "name": "graphql-safe-guards",
+  "version": "1.0.1",
+  "description": "Opinionated GraphQL security guards (depth + complexity) in one import",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "scripts": {
+    "build": "tsc",
+    "test": "vitest",
+    "prepublishOnly": "npm run build"
+  },
+  "dependencies": {
+    "-": "^0.0.1",
+    "graphql-complexity-validation": "^1.0.4",
+    "graphql-safe-depth": "^1.0.0"
+  },
+  "peerDependencies": {
+    "graphql": "^14 || ^15 || ^16"
+  },
+  "keywords": [
+    "graphql",
+    "security",
+    "depth",
+    "complexity",
+    "apollo",
+    "nest",
+    "yoga"
+  ],
+  "author": "Mateo diaz lopez <mateodiaz401@gmail.com>",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/Mateodiaz401/graphql-safe-guards.git"
+  },
+  "homepage": "https://github.com/Mateodiaz401/graphql-safe-guards",
+  "bugs": {
+    "url": "https://github.com/Mateodiaz401/graphql-safe-guards/issues"
+  },
+  "devDependencies": {
+    "@types/node": "^25.0.9",
+    "@vitest/coverage-v8": "^4.0.17",
+    "typescript": "^5.9.3",
+    "vitest": "^4.0.17"
+  }
+}

package/test/graphqlSafeGuards.test.ts

@@ -0,0 +1,15 @@
+import { describe, it, expect } from "vitest";
+import { graphqlSafeGuards } from "../src";
+
+describe("graphqlSafeGuards", () => {
+  it("returns validation rules", () => {
+    const rules = graphqlSafeGuards({
+      depth: 3,
+      complexity: 10,
+    });
+
+    expect(rules).toHaveLength(2);
+    expect(typeof rules[0]).toBe("function");
+    expect(typeof rules[1]).toBe("function");
+  });
+});