🎩 You're Invited:Meet the Socket team at Black Hat in Las Vegas, August 3-6.RSVP
Sign In

graphql-contract

Package Overview
Dependencies
Maintainers
1
Versions
1
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

graphql-contract

Consumer-driven contract testing for GraphQL APIs — no broker required

latest
npmnpm
Version
0.1.0
Version published
Weekly downloads
2
100%
Maintainers
1
Weekly downloads
 
Created
Source

graphql-contract

Consumer-driven contract testing for GraphQL APIs using field selection sets. Frontend teams declare which fields they consume; backend CI fails if those fields change incompatibly. No Pact Broker server required — contracts are simple JSON files stored alongside your code.

Installation

npm install graphql-contract --save-dev
# graphql is a peer dependency
npm install graphql

Quick Start

Consumer Side

In your frontend/consumer project, define and publish a contract:

import { defineContract, publishContract } from 'graphql-contract';

const contract = defineContract({
  consumer: 'web-app',
  provider: 'user-service',
  operations: [
    `query GetUser {
      user(id: "1") {
        id
        email
        name
      }
    }`,
    `query GetUsers {
      users {
        id
        name
      }
    }`,
  ],
});

await publishContract(contract, {
  outputPath: './contracts/web-app.json',
});

Provider Side

In your backend/provider project, verify contracts against your schema:

import { buildSchema } from 'graphql';
import { verifyContracts } from 'graphql-contract';

const schema = buildSchema(`
  type Query {
    user(id: ID!): User!
    users: [User!]!
  }

  type User {
    id: ID!
    email: String!
    name: String!
  }
`);

const result = await verifyContracts({
  schema,
  contractsPath: './contracts',
});

if (!result.passed) {
  console.error('Contract violations found:');
  for (const v of result.violations) {
    console.error(`  ${v.field}: ${v.reason}`);
  }
  process.exit(1);
}

console.log('All contracts verified successfully.');

API Reference

defineContract(opts)

Creates a contract object.

ParameterTypeDescription
opts.consumerstringName of the consuming service
opts.providerstringName of the provider service
opts.operationsstring[]GraphQL operation strings

Returns a GraphQLContract object. Throws if any operation is syntactically invalid GraphQL.

publishContract(contract, opts)

Writes a contract to a JSON file.

ParameterTypeDescription
contractGraphQLContractThe contract to publish
opts.outputPathstringFile path to write the JSON contract

verifyContracts(opts)

Verifies all contract JSON files in a directory against a GraphQL schema.

ParameterTypeDescription
opts.schemaGraphQLSchemaThe provider's GraphQL schema
opts.contractsPathstringPath to directory containing contract JSON files

Returns { passed: boolean; violations: ContractViolation[] }.

checkOperationCompatibility(operation, schema)

Low-level check for a single operation against a schema.

ParameterTypeDescription
operationstringA GraphQL operation string
schemaGraphQLSchemaThe schema to check against

Returns ContractViolation[].

How It Fits Into CI

  • Consumer CI: Run defineContract + publishContract to generate contract JSON files. Commit them to the provider repo or a shared contracts repo.

  • Provider CI: Run verifyContracts against your current schema. If any violations are found, the build fails before deployment.

# Example GitHub Actions step (provider)
- name: Verify GraphQL contracts
  run: npx tsx scripts/verify-contracts.ts

This ensures backend teams cannot accidentally break fields that frontend teams depend on.

License

MIT

Keywords

graphql

FAQs

Package last updated on 21 Feb 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts