@tanstack/react-start-server
51
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
tannerlinsleyalemtuzlakkevinvandy
Keywords
reactlocationrouterroutingasyncasync routertypescript
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:tiny-warning | AI (phantom-deps): tiny-warning is a standard utility dependency for this package. | ai | |
| phantom-deps | phantom-dep:h3 | AI (phantom-deps): h3 is a legitimate server framework dependency for this routing package. | ai | |
| phantom-deps | phantom-dep:jsesc | AI (phantom-deps): jsesc is a legitimate utility dependency referenced in config. | ai | |
| phantom-deps | phantom-dep:unctx | AI (phantom-deps): unctx is a legitimate async context utility for this package. | ai | |
| provenance | publisher-changed | AI (provenance): TanStack migrated to GitHub Actions CI/CD publishing with SLSA provenance attestation. This is a legitimate and security-improving transition, not a compromise. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): lachlancollins is a known TanStack contributor; maintainer additions in an active OSS org are routine and not a compromise signal. | ai | |
| phantom-deps | phantom-dep:@tanstack/history | AI (phantom-deps): Same-org sibling package from TanStack monorepo; phantom dep pattern is expected in monorepo package structures. | ai | |
| phantom-deps | phantom-dep:@tanstack/start-client-core | AI (phantom-deps): Same-org sibling package from TanStack monorepo; phantom dep pattern is expected in monorepo package structures. | ai |
Versions (showing 51 of 478)
| Version | Deps | Published |
|---|---|---|
| 1.167.22 | 3 / 5 | |
| 1.167.21 | 3 / 5 | |
| 1.167.20 | 3 / 5 | |
| 1.167.19 | 3 / 5 | |
| 1.167.18 | 3 / 5 | |
| 1.167.17 | 3 / 5 | |
| 1.167.16 | 3 / 5 | |
| 1.167.15 | 3 / 5 | |
| 1.167.14 | 5 / 5 | |
| 1.167.13 | 5 / 5 | |
| 1.167.12 | 5 / 5 | |
| 1.167.11 | 5 / 5 | |
| 1.167.10 | 5 / 5 | |
| 1.167.9 | 5 / 5 | |
| 1.167.8 | 5 / 5 | |
| 1.167.7 | 5 / 5 | |
| 1.167.6 | 5 / 5 | |
| 1.167.5 | 5 / 5 | |
| 1.167.4 | 5 / 5 | |
| 1.167.3 | 5 / 5 | |
| 1.167.2 | 5 / 5 | |
| 1.167.1 | 5 / 5 | |
| 1.167.0 | 5 / 5 | |
| 1.166.52 | 5 / 5 | |
| 1.166.51 | 5 / 5 | |
| 1.166.50 | 5 / 5 | |
| 1.166.49 | 5 / 5 | |
| 1.166.48 | 5 / 5 | |
| 1.166.47 | 5 / 5 | |
| 1.166.46 | 5 / 5 | |
| 1.166.45 | 5 / 5 | |
| 1.166.44 | 5 / 5 | |
| 1.166.43 | 5 / 5 | |
| 1.166.42 | 5 / 5 | |
| 1.166.41 | 5 / 5 | |
| 1.166.40 | 5 / 5 | |
| 1.166.39 | 5 / 5 | |
| 1.166.38 | 5 / 5 | |
| 1.166.37 | 5 / 5 | |
| 1.166.36 | 5 / 5 | |
| 1.166.35 | 5 / 5 | |
| 1.166.34 | 5 / 5 | |
| 1.166.33 | 5 / 5 | |
| 1.166.32 | 5 / 5 | |
| 1.166.31 | 5 / 5 | |
| 1.166.30 | 5 / 5 | |
| 1.166.29 | 5 / 5 | |
| 1.166.28 | 5 / 5 | |
| 1.166.27 | 5 / 5 | |
| 1.166.26 | 5 / 5 | |
| 1.166.25 | 5 / 5 |
v1.167.22
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.167.21
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.