4.30/ 5.00
trustedBeta
Mar 18, 2026 at 5:02 AM6 signals analysedNo manual reviews · fully automated
Trust Signal Breakdown
high23 sub-signals across 6 dimensions

CVEs, dependency health, and supply chain integrity

3 of 3 sub-signals with data

Known CVEs40%5.0

No known CVEs

via OSV.dev

Dependency Health30%5.0

1 dependencies (minimal)

via npm / PyPI

Supply Chain30%5.0

Supply chain analyzed, no transitive CVEs

via npm provenance

Uptime, latency, error rates, and incident history

4 of 4 sub-signals with data

Uptime35%5.0

100.00% over 17 checks

via Health checks

Response Latency25%3.0

p99: 535ms, p50: 292ms

via Health checks

Error Rate20%5.0

0.00% error rate (0/17)

via Health checks

Incident History20%1.0

7 incidents in last 90 days

via Incidents table

Commit recency, release cadence, issue response, CI/CD

3 of 4 sub-signals with data

Commit Recency37%5.0

via GitHub

Release Cadence31%5.0

via GitHub

Issue Responseno data

Weight redistributed to sub-signals with data

CI/CD Presence31%5.0

via GitHub Actions

Downloads, stars, dependents, and growth trajectory

3 of 4 sub-signals with data

Download Volume43%3.5

73,602 weekly downloads

via npm / PyPI

GitHub Stars36%5.0

12,717 stars

via GitHub

Dependent Packagesno data

Weight redistributed to sub-signals with data

Growth Trend21%2.0

-5.2% week-over-week

via npm

License, documentation, security policy, changelog

4 of 4 sub-signals with data

Open Source30%5.0

Public repo with OSI-approved license (apache-2.0)

via GitHub

Documentation25%4.0

Good README (>2000 bytes with examples)

via GitHub

Security Policy20%2.0

No SECURITY.md found

via GitHub

Changelog25%4.0

Releases exist but no CHANGELOG.md

via GitHub

Track record, org maturity, community standing

4 of 4 sub-signals with data

Track Record30%3.5

Internal: 2.0 (1 services), External: 3.5 (5078 followers, 9379 stars)

via Fabric index

Org Maturity30%4.5

Organization, 3.7 years old

via GitHub

Community Standing20%5.0

228 public repositories

via GitHub

Cross-Platform20%3.0

Present on 2 platform(s): github, npm

via Registry scan

About this score
Scored across 23 sub-signals in 6 dimensionsScoring engine v1 (beta) — actively being expandedPhase 1: Core sub-signal architecture (live)Phase 2: Permission scope & expanded collection (in progress)
Trust AssessmentAI Assessment

@json-render/react is an Apache-2.0 licensed React renderer published by json-render that converts JSON specifications into React components with data binding and visibility controls. The package shows no vulnerabilities and maintains strong operational reliability, but scores zero for maintenance, transparency, and publisher trust signals, indicating minimal verifiable development activity or organizational disclosure. With only 56.3K weekly downloads and a single dependency, this appears to be a newer or niche tool where the primary risk is the lack of visible maintenance governance and publisher track record.

Generated by Fabric AI · Mar 4, 2026 at 4:10 AM

Package Availability (30d)
100.00%
p50: 292ms · p99: 535ms
Avg Latency
237ms
averaged across 30d health checks
Weekly Downloads
73.6k-5%
npm weekly
Transparency & Compliance3/6 passed
Open Source CodePublic repository on GitHub
OSI LicenseLicensed under APACHE-2.0
DocumentationREADME with examples/code blocks
SECURITY.mdNo security policy found
API DocumentationNo API documentation detected
Model / System CardNo model card found
Incidents & Alertslast 90 days
Mar 5Trust score increased by 1.364.35
Mar 4Trust score decreased by 1.392.99
Mar 4Trust score decreased by 1.392.99
Mar 1Trust score increased by 1.214.45
Mar 1Trust score decreased by 1.023.24
Feb 25Trust score increased by 0.584.26
Showing 6 of 7 events
Score History90 snapshots
5.003.752.501.250.00
Feb 24Mar 2
Community & Ecosystemadoption signals
73.6k
Weekly Downloads
npm
10
Releases
on GitHub
Supply Chain & Dependenciestrust chain
@json-render/core
npm · 0.14.1
Showing 1 of 1 dependencies
Data Sources6 indexed
Version Historyscore per release
VERSIONRELEASEDSCOREDELTA
@json-render/redux@0.14.1Mar 17, 20264.31
@json-render/remotion@0.14.1Mar 17, 20264.31
@json-render/svelte@0.14.1Mar 17, 20264.31
@json-render/xstate@0.14.1Mar 17, 20264.31
@json-render/vue@0.14.1Mar 17, 20264.31
@json-render/zustand@0.14.1Mar 17, 20264.31
Showing 6 of 10 releases

Are you the publisher?

Claim this profile to unlock deeper evaluation, real-time monitoring,
and trust signals that help agents discover your service.

Share this Trust Score

Generate a scorecard image optimised for X, LinkedIn and other social platforms.

⬇ Download Score Card