TanStack
Featured
router
TanStack Router is a type-safe, data-driven React router with built-in caching, prefetching, and nested layouts, while TanStack Start extends it into a full-stack SSR framework.
AI repository intelligence
FR-AI / ANALYSISWhy it is worth attention
It introduces transitive risk propagation across the dependency graph and a Bayesian DAG scoring engine with multi-source vulnerability aggregation, offering more nuanced insights than existing tools like npm audit or Socket.
Who it is for
- npm package consumers evaluating new dependencies
- security engineers auditing project supply chains
- DevOps teams automating pre-install checks
- open-source maintainers assessing their own package health
Use cases
- Screen a package before running npm install with `revera add`
- Audit an entire project (including transitive dependencies) with `revera audit`
- Get a detailed explainable score breakdown for any package with `revera why`
- Compare package reputation across alternatives (planned)
Strengths
- Explainable scoring with 8 categories and Bayesian credible intervals
- Transitive risk propagation that flags tainted dependencies and shows blast radius
- Queries three independent vulnerability databases (OSV, GitHub Advisory, npm) in parallel
- Offline mode and encrypted token storage for GitHub API authentication
Considerations
- V1 benchmark shows low detection for malicious (22.2%) and typosquat (35.0%) packages, though v2 veto checks aim to fix this
- No official GitHub Action or VS Code extension yet (on roadmap)
- Only supports npm ecosystem (not pnpm or Yarn natively) and requires Node ≥20
README quick start
Quick Start
Description
The credit score for npm packages. Analyze package reputation, maintenance, security, publisher trust, and ecosystem health before you install any package.
Related repositories
Similar projects matched by category, topics, and programming language.
vercel-labs
Featured
scriptc
scriptc compiles ordinary TypeScript into small, fast native executables without needing Node.js, V8, or any JavaScript runtime in the binary.
Jakubantalik
Featured
thinking-orbs
A React component library that renders six hand-tuned animated thought orb loading indicators on a plain 2D canvas, with two purpose-tuned sizes and automatic theme detection for AI and agent UIs.