I made revera, a tool that scores NPM packages before you blindly install themgithub.com · 17d on radar
Distribution DependencyMIXED · 47
◀ Founder-drivenMarket-pulled ▶
Traction8
Copyability35
Wedge Potential62
Monetization0
Preview
Revera is a CLI tool that generates a reputation score (0-100) for npm packages before installation, analyzing maintenance, security, stability, and ecosystem health across nine dimensions. The product addresses real supply-chain anxiety in JavaScript development by providing explainable scoring vs. opaque alternatives like Socket.dev or OSV-Scanner.
One insight: No monetization signals, zero revenue claims, and minimal founder reach (one r/SideProject post with ~2-star GitHub) suggest this is early-stage hobby code competing directly against funded, battle-tested alternatives in a commoditizing space where npm/GitHub could obsolete via native features.
Detection evidence · source-attributed
MRR / user / tactic claims are directional and source-attributed, not verified.