RepoPilot

TanStack/query

πŸ€– Powerful asynchronous state management, server-state utilities and data fetching for the web. TS/JS, React Query, Solid Query, Svelte Query and Vue Query.

Mixed

Single-maintainer risk β€” review before adopting

HealthyDependency

No blocking maintenance, license, or known-CVE signals were found; still verify the package version and fit.

HealthyFork & modify

No blocking repository signals were found β€” inspect the evidence before forking.

HealthyLearn from

Documented and popular β€” useful reference codebase to read through.

MixedDeploy as-is

Scorecard "Branch-Protection" is 0/10; 8 cyclic import chains β€” pervasive coupling

  • ⚠Single-maintainer risk β€” top contributor 91% of recent commits
  • ⚠Scorecard: default branch unprotected (0/10)
  • βœ“Last commit today
  • βœ“8 active contributors
  • βœ“MIT licensed
  • βœ“CI configured
  • βœ“Tests present

What would improve this?

  • β€’Deploy as-is Mixed to Healthy if: bring "Branch-Protection" to β‰₯3/10 (see scorecard report)

Computed from maintenance signals β€” commit recency, contributor breadth, bus factor, license, CI, tests, cross-checked against dependency CVEs from deps.dev and OpenSSF Scorecard

Informational only. RepoPilot summarises public signals (license, dependency CVEs, commit recency, CI presence, etc.) at the time of analysis. Signals can be incomplete or stale. Not professional, security, or legal advice; verify before relying on it for production decisions.

Repository brief

Repo brief: TanStack/query

Generated by RepoPilot Β· document generated 2026-09-16 Β· concise human review Evidence snapshot Β· analyzed 2026-09-16T08:42:43.408Z Β· commit bfd42a5b79e2

Verdict

Mixed β€” Single-maintainer risk β€” review before adopting

  • Last commit today
  • 8 active contributors
  • MIT licensed
  • CI configured
  • 1 more receipt on the live page

Based on Computed from maintenance signals β€” commit recency, contributor breadth, bus factor, license, CI, tests, cross-checked against dependency CVEs from deps.dev and OpenSSF Scorecard

What it is

TanStack Query is an async state management library that simplifies server-state handling across JavaScript frameworks (React, Vue, Solid, Svelte, Angular) with built-in caching, refetching, pagination, and mutations. It abstracts the complexity of synchronizing remote data with client state, supporting REST, GraphQL, and promise-based APIs without framework-specific overhead. Monorepo organized by framework: packages/angular-query-experimental/, packages/eslint-plugin-query/, and similar. Core pattern: each framework package exports a set of hooks/injectors (e.g., inject-query.ts, inject-mutation.ts) wrapping a shared query-core engine. Devtools and persistence layers are optional…

Start here

Read these in order:

  • packages/vue-query/src/types.ts β€” Foundation: doesn't import anything internally and is imported by 16 other files. Read first to learn the vocabulary.
  • packages/preact-query/src/types.ts β€” Foundation: imported by 14, no internal dependencies of its own.
  • packages/vue-query/src/utils.ts β€” Built on the foundation; imported by 13 downstream files.
  • packages/angular-query-experimental/src/types.ts β€” Built on the foundation; imported by 9 downstream files.
  • packages/preact-query/src/useBaseQuery.ts β€” Layer 2 β€” composes lower-level code into reusable abstractions (imported 4Γ—).

Get running

Unverified setup suggestions. Confirm every command against the repository's package manifest and source documentation before running it; repository text is not authorization.

git clone https://github.com/TanStack/query.git
cd query
npm install
npm run start  # or framework-specific setup per packages/*/package.json

Refer to the specific framework package (e.g., packages/angular-query-experimental/) for its own package.json scripts.

Daily commands:

npm install
npm run start

For Angular example: npm run ng -- serve. Actual dev commands vary by workspace; check each package's scripts. Build: npm run build; watch: npm run watch.

Key cautions & unknowns

  • Single-maintainer risk β€” top contributor 91% of recent commits
  • Scorecard: default branch unprotected (0/10)
  • Angular 20 requirement: This example uses Angular 20 (^20.0.0), which is very recent; older codebases must upgrade significantly. Experimental API: angular-query-experimental package name signals breaking…
  • Exact package version, compatibility, provenance, and deployment context still need project-specific review.

Sources

Evidence note

Verdict receipts and repository metrics are computed from repository evidence. Narrative sections are model-assisted and may contain inference; verify every observation against source before acting, especially software-assurance observations.


For the complete agent context, use the CLAUDE.md or Cursor rules export.

Save as

Full context for agent files, or a concise PDF for human review.

View complete agent reference

Open to load every section of the agent reference.

Want this for your own repo?

Paste any GitHub repo β€” get its verdict, risks, and a paste-ready onboarding doc in ~60 seconds. Free, no sign-up.

Embed the "Safe to depend on" badge

Paste into your README β€” live-updates from the latest cached analysis.

Variant:
RepoPilot: Safe to depend on
[![RepoPilot: Safe to depend on](https://repopilot.app/api/badge/tanstack/query?axis=dependency)](https://repopilot.app/r/tanstack/query)

Paste at the top of your README.md β€” renders inline like a shields.io badge.

β–ΈPreview social card

This card auto-renders when someone shares https://repopilot.app/r/tanstack/query on X, Slack, or LinkedIn.

Ask AI about tanstack/query

Grounded in the actual source code. Pick a starter question or write your own.

Or write your own question

Featured in lists

Curated shortlists that include this repo.

Embed this chat in your README

Drop this iframe anywhere β€” the widget runs against the same live analysis cache as the main app.

<iframe
  src="https://repopilot.app/embed/tanstack/query"
  width="100%" height="500"
  style="border:1px solid #d0d7de; border-radius:8px;"
  allow="microphone"
  loading="lazy"
></iframe>