Drunomics Prefers RESTful Over GraphQL for Enterprise Projects, Citing Concerns

Drunomics, a company specializing in decoupled Drupal sites, has opted against using GraphQL for its enterprise projects despite its popularity, according to Wolfgang Ziegler. Citing concerns such as general complexity, loose data contracts, and performance issues, Wolfgang explains that GraphQL can lead to inefficiencies due to complex queries and security vulnerabilities. Although GraphQL allows frontend developers significant flexibility, it increases backend workload and complicates data fetching processes. Security risks, including exposure to denial-of-service (DOS) attacks, further complicate implementation. Wolfgang suggests that alternatives, particularly RESTful APIs, offer more manageable solutions for enterprise applications. While Drupal’s out-of-the-box JSON-API faces similar challenges, Drunomics has developed a configurable RESTful solution via the Custom Elements module, which provides frontend developers with more control while minimizing backend complexity.