← Home

@tanstack/router-cli

npm Repository Homepage

Modern and scalable routing for React applications

100
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

tannerlinsleyalemtuzlakkevinvandy

Keywords

reactlocationrouterroutingasyncasync routertypescript

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
dependencies unvetted-dep:@types/klaw AI (dependencies): Type-only dep from DefinitelyTyped, no execution risk. ai
phantom-deps phantom-dep:nodemon AI (phantom-deps): Build-config usage, benign for this CLI tool. ai
phantom-deps phantom-dep:through2 AI (phantom-deps): Build-config usage, benign for this CLI tool. ai
phantom-deps phantom-dep:@babel/core AI (phantom-deps): Framework-scoped, loaded by convention. ai
phantom-deps phantom-dep:@types/klaw AI (phantom-deps): Type-only dep, expected unused at runtime. ai
phantom-deps phantom-dep:klaw AI (phantom-deps): Build-config usage, benign for this CLI tool. ai
phantom-deps phantom-dep:dedent AI (phantom-deps): Build-config usage, benign for this CLI tool. ai
provenance publisher-changed AI (provenance): TanStack Router transitioned to GitHub Actions CI/CD publishing with SLSA provenance attestation. This is a legitimate and security-improving change, not a compromise. ai
maintainer-change maintainer-added AI (maintainer-change): lachlancollins is a known TanStack contributor; addition is consistent with legitimate team growth in this established project. ai
publish-pattern dormant-publish AI (publish-pattern): Package has 774 versions and is part of the active TanStack monorepo; apparent dormancy reflects package-level history gap, not account inactivity. ai
dependencies unvetted-dep:@tanstack/router-generator AI (dependencies): This is a sibling package in the TanStack Router monorepo, always released in lockstep. The dependency is expected and benign for this package. ai

Versions (showing 100 of 604)

Version Deps Published
1.167.21 3 / 3
1.167.20 3 / 3
1.167.19 3 / 3
1.167.18 3 / 3
1.167.17 3 / 3
1.167.16 3 / 3
1.167.15 3 / 3
1.167.14 3 / 3
1.167.13 3 / 3
1.167.12 3 / 3
1.167.11 3 / 3
1.167.10 3 / 3
1.167.9 3 / 3
1.167.8 3 / 3
1.167.7 3 / 3
1.167.6 3 / 3
1.167.5 3 / 2
1.167.4 3 / 2
1.167.3 3 / 2
1.167.2 3 / 2
1.167.1 3 / 2
1.167.0 3 / 2
1.166.43 3 / 2
1.166.42 3 / 2
1.166.41 3 / 2
1.166.40 3 / 2
1.166.39 3 / 2
1.166.38 3 / 2
1.166.37 3 / 2
1.166.36 3 / 2
1.166.35 3 / 2
1.166.34 3 / 2
1.166.33 3 / 2
1.166.32 3 / 2
1.166.31 3 / 2
1.166.30 3 / 2
1.166.29 3 / 2
1.166.28 3 / 2
1.166.27 3 / 2
1.166.26 3 / 2
1.166.25 3 / 2
1.166.24 3 / 2
1.166.23 3 / 2
1.166.22 3 / 2
1.166.21 3 / 2
1.166.20 3 / 2
1.166.19 3 / 2
1.166.18 3 / 2
1.166.17 3 / 2
1.166.16 3 / 2
1.166.15 3 / 2
1.166.14 3 / 2
1.166.13 3 / 2
1.166.12 3 / 2
1.166.11 3 / 2
1.166.10 3 / 2
1.166.9 3 / 2
1.166.8 3 / 2
1.166.7 3 / 2
1.166.6 3 / 2
1.166.4 3 / 2
1.166.2 3 / 2
1.164.0 3 / 2
1.163.5 3 / 2
1.163.3 3 / 2
1.163.2 3 / 2
1.162.9 3 / 2
1.162.6 3 / 2
1.162.5 3 / 2
1.162.2 3 / 2
1.162.1 3 / 2
1.161.4 3 / 2
1.161.3 3 / 1
1.161.1 3 / 1
1.160.1 3 / 1
1.160.0 3 / 1
1.159.9 3 / 1
1.159.6 3 / 1
1.159.4 3 / 1
1.158.4 3 / 1
1.158.1 3 / 1
1.158.0 3 / 1
1.157.19 3 / 1
1.157.18 3 / 1
1.157.16 3 / 1
1.157.15 3 / 1
1.157.14 3 / 1
1.157.13 3 / 1
1.157.12 3 / 1
1.157.11 3 / 1
1.157.10 3 / 1
1.157.9 3 / 1
1.157.8 3 / 1
1.157.7 3 / 1
1.157.6 3 / 1
1.157.5 3 / 1
1.157.4 3 / 1
1.157.3 3 / 1
1.157.1 3 / 1
1.157.0 3 / 1
Showing 100 of 604 Next page →

v1.167.21

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.167.20

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.167.19

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.167.18

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.