@tanstack/react-start
51
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
tannerlinsleyalemtuzlakkevinvandy
Keywords
reactlocationrouterroutingasyncasync routertypescript
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| dependencies | unvetted-dep:@tanstack/react-start-server-functions-ssr | AI (dependencies): Sibling monorepo package, same publisher/version, standard TanStack split. | ai | |
| dependencies | unvetted-dep:@tanstack/react-start-server-functions-handler | AI (dependencies): Sibling monorepo package, same publisher/version, standard TanStack split. | ai | |
| dependencies | unvetted-dep:@tanstack/react-start-server-functions-client | AI (dependencies): Sibling monorepo package, same publisher/version, standard TanStack split. | ai | |
| dependencies | unvetted-dep:@tanstack/react-start-api-routes | AI (dependencies): Sibling monorepo package, same publisher/version, standard TanStack split. | ai | |
| dependencies | unvetted-dep:@tanstack/react-start-plugin | AI (dependencies): First-party sibling package from TanStack monorepo; pinned to same release version. | ai | |
| dependencies | unvetted-dep:@tanstack/start-server-functions-server | AI (dependencies): First-party TanStack monorepo sub-package; stable pattern across releases. | ai | |
| dependencies | unvetted-dep:@tanstack/start-server-functions-handler | AI (dependencies): First-party TanStack monorepo sub-package; stable pattern across releases. | ai | |
| dependencies | unvetted-dep:@tanstack/react-start-router-manifest | AI (dependencies): First-party TanStack monorepo sub-package; stable pattern across releases. | ai | |
| dependencies | unvetted-dep:@tanstack/start-api-routes | AI (dependencies): First-party TanStack monorepo sub-package; stable pattern across releases. | ai | |
| dependencies | unvetted-dep:@tanstack/react-start-config | AI (dependencies): First-party TanStack monorepo sub-package; stable pattern across releases. | ai | |
| dependencies | unvetted-dep:@tanstack/start-server-functions-ssr | AI (dependencies): First-party TanStack monorepo sub-package; stable pattern across releases. | ai | |
| dependencies | unvetted-dep:@tanstack/start-server-functions-client | AI (dependencies): First-party TanStack monorepo sub-package; stable pattern across releases. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): lachlancollins is a known TanStack collaborator; adding maintainers to a mature project is expected. | ai | |
| provenance | publisher-changed | AI (provenance): Transition from manual (tannerlinsley) to CI/CD (GitHub Actions) publishing with SLSA provenance. This is a security improvement, not a risk. | ai | |
| phantom-deps | phantom-dep:@tanstack/router-utils | AI (phantom-deps): Same-org sibling package from TanStack monorepo; phantom dep status is a packaging detail, not a security concern for this well-attested package. | ai |
Versions (showing 51 of 565)
| Version | Deps | Published |
|---|---|---|
| 1.168.32 | 9 / 2 | |
| 1.168.31 | 9 / 2 | |
| 1.168.30 | 9 / 2 | |
| 1.168.29 | 9 / 2 | |
| 1.168.28 | 9 / 2 | |
| 1.168.27 | 9 / 2 | |
| 1.168.26 | 9 / 2 | |
| 1.168.25 | 9 / 2 | |
| 1.168.24 | 9 / 2 | |
| 1.168.23 | 9 / 2 | |
| 1.168.22 | 9 / 2 | |
| 1.168.21 | 9 / 2 | |
| 1.168.20 | 9 / 2 | |
| 1.168.19 | 9 / 2 | |
| 1.168.18 | 9 / 2 | |
| 1.168.17 | 9 / 2 | |
| 1.168.16 | 9 / 2 | |
| 1.168.15 | 9 / 2 | |
| 1.168.14 | 9 / 2 | |
| 1.168.13 | 9 / 2 | |
| 1.168.12 | 9 / 2 | |
| 1.168.11 | 9 / 2 | |
| 1.168.10 | 9 / 2 | |
| 1.168.9 | 9 / 2 | |
| 1.168.8 | 9 / 2 | |
| 1.168.7 | 9 / 2 | |
| 1.168.6 | 9 / 2 | |
| 1.168.5 | 9 / 2 | |
| 1.168.4 | 9 / 2 | |
| 1.168.3 | 9 / 2 | |
| 1.168.2 | 9 / 2 | |
| 1.168.1 | 9 / 2 | |
| 1.168.0 | 9 / 2 | |
| 1.167.65 | 9 / 2 | |
| 1.167.64 | 9 / 2 | |
| 1.167.63 | 9 / 2 | |
| 1.167.62 | 9 / 2 | |
| 1.167.61 | 9 / 3 | |
| 1.167.60 | 9 / 3 | |
| 1.167.59 | 9 / 3 | |
| 1.167.58 | 9 / 3 | |
| 1.167.57 | 9 / 3 | |
| 1.167.56 | 9 / 3 | |
| 1.167.55 | 9 / 3 | |
| 1.167.54 | 9 / 3 | |
| 1.167.53 | 9 / 3 | |
| 1.167.52 | 9 / 3 | |
| 1.167.51 | 9 / 3 | |
| 1.167.50 | 9 / 3 | |
| 1.167.49 | 9 / 3 | |
| 1.167.48 | 9 / 3 |
v1.168.32
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.168.31
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.168.30
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.168.29
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.168.28
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.168.27
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.