← Home

@tanstack/react-start-server

npm Repository Homepage
25
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

tannerlinsleytkdodoalemtuzlakkevinvandyschiller-manuel

Keywords

reactlocationrouterroutingasyncasync routertypescript

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:tiny-warning AI (phantom-deps): tiny-warning is a standard utility dependency for this package. ai
phantom-deps phantom-dep:h3 AI (phantom-deps): h3 is a legitimate server framework dependency for this routing package. ai
phantom-deps phantom-dep:jsesc AI (phantom-deps): jsesc is a legitimate utility dependency referenced in config. ai
phantom-deps phantom-dep:unctx AI (phantom-deps): unctx is a legitimate async context utility for this package. ai
provenance publisher-changed AI (provenance): TanStack migrated to GitHub Actions CI/CD publishing with SLSA provenance attestation. This is a legitimate and security-improving transition, not a compromise. ai
maintainer-change maintainer-added AI (maintainer-change): lachlancollins is a known TanStack contributor; maintainer additions in an active OSS org are routine and not a compromise signal. ai
phantom-deps phantom-dep:@tanstack/history AI (phantom-deps): Same-org sibling package from TanStack monorepo; phantom dep pattern is expected in monorepo package structures. ai
phantom-deps phantom-dep:@tanstack/start-client-core AI (phantom-deps): Same-org sibling package from TanStack monorepo; phantom dep pattern is expected in monorepo package structures. ai

Versions (showing 25 of 427)

Version Deps Published
1.121.12 11 / 6
1.121.10 11 / 6
1.121.2 11 / 6
1.121.0 11 / 6
1.120.20 10 / 6
1.120.19 10 / 6
1.120.18 10 / 6
1.120.17 10 / 6
1.120.16 10 / 6
1.120.15 10 / 6
1.120.13 10 / 6
1.120.12 10 / 6
1.120.11 10 / 6
1.120.10 10 / 6
1.120.9 10 / 6
1.120.8 10 / 6
1.120.7 10 / 6
1.120.5 10 / 6
1.120.4 10 / 6
1.120.3 10 / 6
1.120.2 10 / 6
1.120.1 10 / 6
1.120.0 10 / 6
1.119.0 10 / 6
1.117.1 10 / 6

v1.121.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.120.11

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.