Audit something real. If you have no integration yet, audit one you are planning.
Audit one integration
- Name the subgraph you depend on and find who maintains it.
- Check whether indexers are currently allocated to it, and whether it is indexing healthily.
- Confirm your API key is not present in any client bundle. Actually search the build output.
- Add indexing status to your most important query, and decide what the UI shows for behind and for failed.
- Find every query without a timeout and give it one.
- Find your highest-volume screen and count the queries it makes per view.
- Work out queries per user session, and multiply by your expected users.
- Decide what your application renders when the data source is unavailable, and check that it does that.