TypeScript Open-Source Supply-Chain Review
TypeScript repository pattern findings, supply-chain review signals and scan coverage.
Report generated: 2026-11-14 17:29 UTC.
Primary repository language: TypeScript. 1219 successful scans; 1219 with a score, positive coverage and complete version metadata. Mean values are grouped by version; individual scores below are review prompts, not confirmed package incidents.
| Language | Scanned repos | Repos scored | Mean index / 100 | Schema / engine / scoring |
|---|---|---|---|---|
| TypeScript | 1219 | 1219 | 2.36 | 1.0.0 / 2.0.0 / heuristic-density-v1 |
Repository evidence
| Repository | Supply-chain index / 100 | Schema / engine / scoring | Lines scanned | Scan date |
|---|---|---|---|---|
| bluesky-social/atproto | 74.49 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 525,595 | 2026-10-31 |
| gitpod-io/gitpod | 66.41 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 908,095 | 2026-10-31 |
| usablica/intro.js | 59.59 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 25,276 | 2026-10-31 |
| react-grid-layout/react-grid-layout | 55.81 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 121,769 | 2026-10-31 |
| n4ze3m/page-assist | 53.48 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 89,665 | 2026-10-31 |
| raineorshine/npm-check-updates | 41.03 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 48,517 | 2026-10-31 |
| openai/openai-node | 37.68 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 432,200 | 2026-10-31 |
| typeorm/typeorm | 35.85 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 349,676 | 2026-10-31 |
| invertase/react-native-firebase | 35.24 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 308,539 | 2026-10-31 |
| voidauth/voidauth | 34.49 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 49,065 | 2026-10-31 |
| upstash/context7 | 34.29 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 56,266 | 2026-10-31 |
| googleapis/google-api-nodejs-client | 30.84 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 5,309,245 | 2026-10-31 |
| bluewave-labs/Checkmate | 26.98 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 177,461 | 2026-10-31 |
| hexojs/hexo | 25.94 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 43,624 | 2026-10-31 |
| fabricjs/fabric.js | 25.88 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 129,558 | 2026-10-31 |
| makeplane/plane | 22.77 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 565,953 | 2026-10-31 |
| QwenLM/qwen-code | 21.17 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 5,894,765 | 2026-10-31 |
| purocean/yn | 20.68 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 100,129 | 2026-10-31 |
| bokeh/bokeh | 18.60 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 411,451 | 2026-10-31 |
| flybywiresim/aircraft | 18.43 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 874,912 | 2026-10-31 |
| graphif/project-graph | 18.32 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 176,616 | 2026-10-31 |
| DayuanJiang/next-ai-draw-io | 17.91 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 124,683 | 2026-10-31 |
| NapNeko/NapCatQQ | 17.38 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 136,479 | 2026-10-31 |
| strukto-ai/mirage | 17.12 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 2,175,698 | 2026-10-31 |
| chhoumann/quickadd | 16.74 | 1.0.0 / 2.0.0 / heuristic-density-v1 | 239,370 | 2026-10-31 |
Pattern signals are prompts for human review, not proof of AI authorship, security vulnerabilities, missing packages, measured review time or code quality. Selection, scan coverage and scoring versions limit comparisons.