today, I would not recommend GraphQL to most people, and what I think are better alternatives.

Attack surface

Authorisation

Rate limiting

Query parsing

Performance

Data fetching and the N+1 problem

Authorisation and the N+1 problem

Coupling

Complexity

And more...

Almost a year ago, GitHub introduced security alerts. They are an awesome feature.

They function as notifications you receive whenever a vulnerability affecting one of your project dependencies.

But long after receiving a notification, how to list all security alerts affecting your repositories ?

I didn't found an out-of-the box solution …