Public Trust Network
The Public Trust Network extends ReformCode's repository-level Public Trust Index into a broader graph of software adoption evidence. It produces a deterministic snapshot for a package, organization, team portfolio, repository, comparison set, or dependency-alternative review.
Each snapshot includes:
- A 0-100 trust score and status label.
- Weighted dimensions such as package quality, adoption, maintenance forecast, supply-chain posture, governance, community reach, or portfolio readiness.
- Connected trust nodes, including linked repositories and dependency alternatives.
- A
codeGenomeintelligence report with benchmark rank, percentile, competitive positions, forecasts, recommendations, and moat signals. - A reproducible evidence snapshot ID.
- Public share URLs and API URLs for partner marketplaces, README links, procurement evidence, and internal review docs.
Public API
Use the public endpoint to resolve a snapshot:
GET /api/trust/network?kind=package&target=react
Supported kind values:
| Kind | Example |
|---|---|
package | /api/trust/network?kind=package&target=react |
organization | /api/trust/network?kind=organization&target=vercel |
repo | /api/trust/network?kind=repo&target=facebook/react |
comparison | /api/trust/network?kind=comparison&target=react,vue,next |
dependency_alternative | /api/trust/network?kind=dependency_alternative&target=left-pad&related=is-odd,nanoid |
The response is a backward-compatible TrustNetworkSnapshot with an added codeGenome object:
{
"targetKind": "package",
"targetIdentifier": "react",
"score": 88,
"status": "trusted",
"evidenceSnapshotId": "abc123...",
"dimensions": [],
"relationships": [],
"share": {
"url": "https://reformcode.com/trust/network/package/react?snapshot=abc123...",
"apiUrl": "https://reformcode.com/api/trust/network?kind=package&target=react",
"markdown": "[ReformCode Trust Network: react (88/100)](...)"
},
"codeGenome": {
"score": 91,
"grade": "A",
"status": "market_leader",
"benchmark": {
"rank": 1,
"total": 4,
"percentile": 100,
"gapToLeader": 0
},
"forecasts": [],
"recommendations": [],
"moatSignals": []
}
}
Public Pages
Every snapshot includes a shareable page URL:
/trust/network/{kind}/{target}
Examples:
/trust/network/package/react/trust/network/organization/vercel/trust/network/repo/facebook/react/trust/network/comparison/react,vue,next
These pages are built for external trust proof: adoption reviews, open-source due diligence, partner listings, and sales-assisted enterprise procurement.
Code Genome
The Code Genome section turns the same evidence into competitive intelligence:
- Benchmarks: rank, percentile, peer count, leader, and gap to leader.
- Competitive positions: scored connected nodes for repo, package, team, organization, comparison, and dependency-alternative decisions.
- Forecasts: exploit exposure, maintenance drag, ecosystem displacement, and governance drift.
- Recommended moves: replacement alternatives, weak-dimension remediation, benchmark gap investments, and distribution opportunities.
- Moat signals: evidence depth, graph relationship depth, competitive benchmarking, and predictive decision-loop strength.
See Code Genome for the full report contract.
Evidence Model
Public Trust Network snapshots are intentionally explainable. The snapshot ID is derived from the normalized target, dimensions, relationship scores, and statuses. When the same evidence is used, the snapshot ID remains stable.
ReformCode also records privacy-safe evidence reads for public network pages and API calls so the Trust Evidence Warehouse can show which trust assets are being consumed by users, partners, widgets, CLI tools, and extensions.
Product Surfaces
The Trust Network appears in:
- NPM package detail pages as package adoption and supply-chain evidence.
- GitHub developer/organization pages as public profile and community evidence.
- Team Command Center cards as portfolio-level operational trust.
- Public share pages and partner SDK manifest endpoints.
- Code Genome pages and APIs as competitive intelligence for REFORM decisions, CODE backlog priorities, partner listings, and enterprise procurement proof.
Use the repository Public Trust Index for a single analyzed repo. Use the Public Trust Network when the adoption decision spans a package, vendor, team portfolio, peer comparison, or replacement candidate set.