Stack AtlasBeta · provisional scores

Know what your agent is about to install.

Is a library still maintained, deprecated, or superseded — and what replaced it? Stack Atlas answers from dated GitHub and npm evidence for 13 open-source repositories. Health and momentum are kept separate, every value is labelled verified, derived, or approved, and missing evidence is never scored as zero.

13 repositories · evidence through 2026-10-31 · Methodology

13 of 13 repositories · sorted by Repository, ascending
Directory view
Authentication and identityRank 01 / 12Active, derived

better-auth/better-auth

The most comprehensive authentication framework

Health
97ExemplaryMedium confidence#1 of 2 in category
Momentum
Volatile2 of 4 signals
Stack fit
Not evaluatedNeeds a saved profile

Commits · 52 wk

better-auth/better-auth weekly commits: 41 commits in the week of 2026-10-25; peak 140 since 2025-11-02.

480 in the last 13 weeks

npm downloads · 52 wk

better-auth weekly npm downloads: 17,132,550 downloads in the week of 2026-10-23; peak 17,132,550 since 2025-10-31.

1,433,771/day, 90 days

  • Strongest signal: Maintenance scores 100 — Latest non-bot commit: 2026-10-30, 1 day ago.
  • Watch: Governance scores 67 — Issue or PR templates: Missing.
Verified 2026-10-3130,536 starsTypeScript
Validation and schema definitionRank 04 / 12Active, derived

colinhacks/zod

TypeScript-first schema validation with static type inference

Health
92ExemplaryMedium confidence#1 of 1 in category
Momentum
Insufficient history1 of 4 signals
Stack fit
Not evaluatedNeeds a saved profile

Commits · 52 wk

colinhacks/zod weekly commits: 11 commits in the week of 2026-10-25; peak 96 since 2025-11-02.

333 in the last 13 weeks

npm downloads · 52 wk

zod weekly npm downloads: 442,969,207 downloads in the week of 2026-10-23; peak 442,969,207 since 2025-10-31.

46,049,361/day, 90 days

  • Strongest signal: Maintenance scores 100 — Latest non-bot commit: 2026-10-30, 1 day ago.
  • Watch: Governance scores 67 — Issue or PR templates: Missing.
Verified 2026-10-3144,236 starsTypeScript
ORMs and query buildersRank 07 / 12Active, derived

drizzle-team/drizzle-orm

ORM

Health
77SoundMedium confidence#2 of 2 in category
Momentum
Insufficient history1 of 4 signals
Stack fit
Not evaluatedNeeds a saved profile

Commits · 52 wk

drizzle-team/drizzle-orm weekly commits: 0 commits in the week of 2026-10-25; peak 12 since 2025-11-02.

6 in the last 13 weeks

npm downloads · 52 wk

drizzle-orm weekly npm downloads: 42,821,286 downloads in the week of 2026-10-23; peak 42,821,286 since 2025-10-31.

3,706,826/day, 90 days

  • Strongest signal: Documentation scores 100 — README: Present.
  • Watch: Community depth scores 60 — Human contributors (90 days): 3 distinct non-bot authors.
Verified 2026-10-3136,185 starsTypeScript
Styling and design systemsEvergreen, approved

lukeed/clsx

A tiny (239B) utility for constructing `className` strings conditionally.

Health
Insufficient evidenceInsufficient evidence
Momentum
Insufficient history1 of 4 signals
Stack fit
Not evaluatedNeeds a saved profile

Commits · 52 wk

lukeed/clsx weekly commits: 0 commits in the week of 2026-10-25; peak 0 since 2025-11-02.

0 in the last 13 weeks

npm downloads · 52 wk

clsx weekly npm downloads: 159,462,650 downloads in the week of 2026-10-23; peak 159,462,650 since 2025-10-31.

18,926,030/day, 90 days

  • Strongest signal: Stability scores 100 — Primary package ≥ 1.0: clsx@2.1.1.
  • Watch: Documentation scores 33 — Contributing guide: Missing.
Verified 2026-10-319,851 starsJavaScript
Agent frameworks and orchestrationRank 09 / 12Active, derived

mastra-ai/mastra

Mastra is the modern TypeScript framework for AI-powered applications and agents.

Health
69Evaluate carefullyMedium confidence#1 of 1 in category
Momentum
Surging2 of 4 signals
Stack fit
Not evaluatedNeeds a saved profile

Commits · 52 wk

mastra-ai/mastra weekly commits: 614 commits in the week of 2026-10-25; peak 707 since 2025-11-02.

6,859 in the last 13 weeks

npm downloads · 52 wk

@mastra/core weekly npm downloads: 3,003,513 downloads in the week of 2026-10-23; peak 3,003,513 since 2025-10-31.

273,628/day, 90 days

  • Strongest signal: Maintenance scores 100 — Latest non-bot commit: 2026-10-31, today.
  • Watch: License could not be machine-identified — health is capped at 69.
Verified 2026-10-3129,228 starsTypeScript
API frameworks and transportRank 05 / 12Active, derived

middleapi/orpc

Typesafe APIs Made Simple 🪄

Health
87StrongMedium confidence#1 of 1 in category
Momentum
Volatile3 of 4 signals
Stack fit
Not evaluatedNeeds a saved profile

Commits · 52 wk

middleapi/orpc weekly commits: 24 commits in the week of 2026-10-25; peak 52 since 2025-11-02.

475 in the last 13 weeks

npm downloads · 52 wk

@orpc/server weekly npm downloads: 2,850,665 downloads in the week of 2026-10-23; peak 2,850,665 since 2025-10-31.

212,622/day, 90 days

  • Strongest signal: Maintenance scores 100 — Latest non-bot commit: 2026-10-31, today.
  • Watch: Community depth scores 45 — Top contributor share (90 days): The most active author made 97% of human commits.
Verified 2026-10-315,742 starsTypeScript
MCP servers and MCP toolingRank 09 / 12Active, derived

modelcontextprotocol/servers

Model Context Protocol Servers

Health
69Evaluate carefullyLow confidence#1 of 1 in category
Momentum
Surging2 of 4 signals
Stack fit
Not evaluatedNeeds a saved profile

Commits · 52 wk

modelcontextprotocol/servers weekly commits: 77 commits in the week of 2026-10-25; peak 234 since 2025-11-02.

566 in the last 13 weeks

npm downloads · 52 wk

Not measured

  • Strongest signal: Maintenance scores 92 — Latest non-bot commit: 2026-10-28, 3 days ago.
  • Watch: License could not be machine-identified — health is capped at 69.
Verified 2026-10-3191,712 starsTypeScript
Authentication and identityRank 08 / 12Superseded, approved

nextauthjs/next-auth

Authentication for the Web.

Health
73SoundLow confidence#2 of 2 in category
Momentum
Volatile2 of 4 signals
Stack fit
Not evaluatedNeeds a saved profile

Commits · 52 wk

nextauthjs/next-auth weekly commits: 0 commits in the week of 2026-10-25; peak 9 since 2025-11-02.

0 in the last 13 weeks

npm downloads · 52 wk

next-auth weekly npm downloads: 9,215,234 downloads in the week of 2026-10-23; peak 9,215,234 since 2025-10-31.

968,477/day, 90 days

  • Strongest signal: Documentation scores 100 — README: Present.
  • Watch: Community depth scores 0 — Human contributors (90 days): 0 distinct non-bot authors.
Verified 2026-10-3128,375 starsTypeScript
ORMs and query buildersRank 03 / 12Active, derived

prisma/orm

The Prisma ORM: write your application in TypeScript with human-readable queries instead of SQL. Host your database on Prisma Postgres and your app on Prisma Compute.

Health
95ExemplaryMedium confidence#1 of 2 in category
Momentum
Volatile2 of 4 signals
Stack fit
Not evaluatedNeeds a saved profile

Commits · 52 wk

prisma/orm weekly commits: 28 commits in the week of 2026-10-25; peak 628 since 2025-11-02.

519 in the last 13 weeks

npm downloads · 52 wk

@prisma/client weekly npm downloads: 24,247,754 downloads in the week of 2026-10-23; peak 24,247,754 since 2025-10-31.

2,589,665/day, 90 days

  • Strongest signal: Maintenance scores 100 — Latest non-bot commit: 2026-10-30, 1 day ago.
  • Watch: Community depth scores 73 — Top contributor share (90 days): The most active author made 69% of human commits.
Verified 2026-10-3147,661 starsTypeScriptTransferred
Templates, starters, and boilerplatesRank 11 / 12Superseded, approved

react/create-react-app

Set up a modern web app by running one command.

Health
59Evaluate carefullyLow confidence#1 of 1 in category
Momentum
Insufficient history1 of 4 signals
Stack fit
Not evaluatedNeeds a saved profile

Commits · 52 wk

react/create-react-app weekly commits: 0 commits in the week of 2026-10-25; peak 0 since 2025-11-02.

0 in the last 13 weeks

npm downloads · 52 wk

react-scripts weekly npm downloads: 3,398,664 downloads in the week of 2026-10-23; peak 4,896,476 since 2025-10-31.

430,374/day, 90 days

  • Strongest signal: Documentation scores 100 — README: Present.
  • Watch: Community depth scores 0 — Human contributors (90 days): 0 distinct non-bot authors.
Verified 2026-10-31103,234 starsJavaScriptTransferred
HTTP clients and networkingRank 12 / 12Archived, approved

request/request

🏊🏾 Simplified HTTP request client.

Health
33High riskLow confidence#1 of 1 in category
Momentum
Insufficient history1 of 4 signals
Stack fit
Not evaluatedNeeds a saved profile

Commits · 52 wk

request/request weekly commits: 0 commits in the week of 2026-10-25; peak 0 since 2025-11-02.

0 in the last 13 weeks

npm downloads · 52 wk

request weekly npm downloads: 15,625,337 downloads in the week of 2026-10-23; peak 18,607,617 since 2025-10-31.

2,107,607/day, 90 days

  • Watch: Primary package is deprecated on npm — health is capped at 54.
Verified 2026-10-3125,485 starsJavaScriptDeprecated package
Server state and data fetchingRank 06 / 12Active, derived

TanStack/query

🤖 Powerful asynchronous state management, server-state utilities and data fetching for the web. TS/JS, React Query, Solid Query, Svelte Query and Vue Query.

Health
84StrongMedium confidence#1 of 1 in category
Momentum
Surging2 of 4 signals
Stack fit
Not evaluatedNeeds a saved profile

Commits · 52 wk

TanStack/query weekly commits: 126 commits in the week of 2026-10-25; peak 232 since 2025-11-02.

1,050 in the last 13 weeks

npm downloads · 52 wk

@tanstack/react-query weekly npm downloads: 79,359,425 downloads in the week of 2026-10-23; peak 80,915,709 since 2025-10-31.

10,051,627/day, 90 days

  • Strongest signal: Maintenance scores 100 — Latest non-bot commit: 2026-10-30, 1 day ago.
  • Watch: Governance scores 67 — Code of conduct: Missing.
Verified 2026-10-3150,504 starsTypeScript
Web application frameworksRank 02 / 12Active, derived

vercel/next.js

The React Framework

Health
96ExemplaryMedium confidence#1 of 1 in category
Momentum
Surging2 of 4 signals
Stack fit
Not evaluatedNeeds a saved profile

Commits · 52 wk

vercel/next.js weekly commits: 188 commits in the week of 2026-10-25; peak 211 since 2025-11-02.

2,029 in the last 13 weeks

npm downloads · 52 wk

next weekly npm downloads: 90,620,731 downloads in the week of 2026-10-23; peak 90,620,731 since 2025-10-31.

9,285,874/day, 90 days

  • Strongest signal: Maintenance scores 100 — Latest non-bot commit: 2026-10-31, today.
  • Watch: Stability scores 75 — Prerelease share (last year): 87% of 100 releases were prereleases.
Verified 2026-10-31143,281 starsJavaScript

Repositories by category

Agent frameworks and orchestration

API frameworks and transport

Authentication and identity

HTTP clients and networking

MCP servers and MCP tooling

ORMs and query builders

Server state and data fetching

Styling and design systems

Templates, starters, and boilerplates

Validation and schema definition

Web application frameworks

Questions about Stack Atlas

What is a RepoFacts label?
A RepoFacts label summarizes one open-source repository from dated evidence: its maintenance status, a health score with coverage and confidence, momentum by signal family, npm adoption, and reviewed decisions such as supersession. Stack Atlas currently covers 13 repositories.
How does Stack Atlas decide whether a repository is maintained?
It uses the latest commit on the default branch that was not made by a bot account, compared against a six-month cutoff. GitHub's pushed_at and updated_at timestamps are not used, because they move on pushes to any branch and on metadata edits.
How is the health score calculated?
Health averages eight dimensions, including maintenance, security posture, documentation, stability, community depth, and governance, using only signals that have evidence. The score is published with the share of weight the evidence covers; below 50% no score is shown. Critical conditions such as an archived repository or a deprecated package cap the score.
Why isn't momentum a single number?
Momentum compares current and previous windows separately for development, contribution, adoption, and attention. A combined score needs a comparable group of at least 8 repositories per category, which the catalog does not have yet, so each signal is shown on its own.
Does a high health score mean a package is secure?
No. Scores are decision support, not a security audit or certification. Security advisories and dependency data are not collected yet, and the absence of advisory data is not evidence that there are no vulnerabilities.
How current is the data?
A collector records GitHub and npm evidence daily and commits a dated snapshot only when something changed. Every profile shows the date it was last verified, and evidence older than 14 days is marked stale.
Who decides that a repository is superseded or evergreen?
A named reviewer, with evidence links. Those judgments are never derived automatically, and a proposal is not applied until someone other than its proposer approves it.