@tanstack/solid-router
51
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
tannerlinsleyalemtuzlakkevinvandy
Keywords
solidjslocationrouterroutingasyncasync routertypescript
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | source-size-dropped | AI (source-diff): SLSA provenance and unchanged deps/scripts confirm legitimate build; size drop is a build artifact difference, not code removal. | ai | |
| provenance | slsa-provenance | AI (provenance): SLSA provenance via CI/CD is a strong supply chain integrity signal for this package. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): isbot is a well-known bot-detection library; addition is consistent with SSR routing features. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): TanStack org maintainer rotation; tannerlinsley remains publisher with strong track record. | ai | |
| maintainer-change | maintainer-removed | AI (maintainer-change): Paired with maintainer-added; consistent with org-level team change, not a takeover. | ai | |
| phantom-deps | phantom-dep:@solid-devtools/logger | AI (phantom-deps): @solid-devtools/logger is a legitimate optional devtools integration for SolidJS; declared but config-only usage is expected for this package. | ai |
Versions (showing 51 of 404)
| Version | Deps | Published |
|---|---|---|
| 1.170.18 | 5 / 8 | |
| 1.170.17 | 5 / 8 | |
| 1.170.16 | 5 / 8 | |
| 1.170.15 | 5 / 8 | |
| 1.170.14 | 5 / 8 | |
| 1.170.13 | 5 / 8 | |
| 1.170.12 | 5 / 8 | |
| 1.170.11 | 6 / 9 | |
| 1.170.10 | 6 / 9 | |
| 1.170.9 | 6 / 9 | |
| 1.170.8 | 6 / 9 | |
| 1.170.7 | 6 / 9 | |
| 1.170.6 | 6 / 9 | |
| 1.170.5 | 6 / 9 | |
| 1.170.4 | 6 / 9 | |
| 1.170.3 | 6 / 9 | |
| 1.170.2 | 6 / 9 | |
| 1.170.1 | 6 / 9 | |
| 1.170.0 | 6 / 9 | |
| 1.169.2 | 6 / 9 | |
| 1.169.1 | 6 / 10 | |
| 1.169.0 | 6 / 10 | |
| 1.168.26 | 6 / 10 | |
| 1.168.25 | 6 / 10 | |
| 1.168.24 | 6 / 10 | |
| 1.168.23 | 6 / 10 | |
| 1.168.22 | 6 / 10 | |
| 1.168.21 | 6 / 10 | |
| 1.168.20 | 6 / 10 | |
| 1.168.19 | 6 / 10 | |
| 1.168.18 | 6 / 10 | |
| 1.168.17 | 6 / 10 | |
| 1.168.16 | 6 / 10 | |
| 1.168.15 | 6 / 10 | |
| 1.168.14 | 6 / 10 | |
| 1.168.13 | 6 / 10 | |
| 1.168.12 | 6 / 10 | |
| 1.168.11 | 6 / 10 | |
| 1.168.10 | 6 / 10 | |
| 1.168.9 | 6 / 10 | |
| 1.168.8 | 6 / 10 | |
| 1.168.7 | 6 / 10 | |
| 1.168.6 | 6 / 10 | |
| 1.168.5 | 6 / 10 | |
| 1.168.4 | 6 / 10 | |
| 1.168.3 | 6 / 9 | |
| 1.168.2 | 6 / 9 | |
| 1.168.1 | 8 / 9 | |
| 1.168.0 | 8 / 9 | |
| 1.167.5 | 9 / 9 | |
| 1.167.4 | 9 / 9 |
v1.170.18
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.170.17
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.