Avoid unconditional GraphQL introspection
Apollo Server should not hard-enable introspection without environment guards.
#Metadata
#Why it matters
Introspection aids attackers in mapping schemas on production deployments.
#Remediation
Bind introspection to non-production environments or protect the endpoint behind authenticated tooling.
#Repository path
The generated metadata points to critiq-rules/libs/rules/catalog/rules/typescript/ts.security.apollo-server-introspection-exposure.rule.yaml.