November 2018 Summaries

The Apollo VS Code plugin experienced a widespread industry-wide security vulnerability that impacted a dependency of the `event-stream` package, leading to the removal of the extension from the VS Code Marketplace. The Apollo team worked with the VS Code team to republish their package and lock down their extension to a safe version of the compromised dependency. After receiving reports of the extension being flagged as malicious, the Apollo team reached out to the VS Code team for clarification, which ultimately led to the publication of the updated extension back onto the marketplace. The incident highlights the importance of responsible disclosure and security awareness in the developer community.

The Apollo GraphQL Platform is an open-core platform designed to help teams adopt GraphQL incrementally, with tools for collaboration, schema management, and workflow automation. The platform builds on the core open-source Apollo Client and Server technologies and adds new features such as a schema registry, client and operation registries, and a trace warehouse to facilitate collaboration and improve API understanding. The platform is available in three flavors: Community Edition (free, unlimited use), Team Edition ($49/month for small to medium-sized companies), and Enterprise Edition (for mission-critical GraphQL APIs with 24x7x365 production support).