← Home

@tanstack/start-client-core

npm Repository Homepage
100
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

tannerlinsleyalemtuzlakkevinvandy

Keywords

reactlocationrouterroutingasyncasync routertypescript

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): TanStack migrated to GitHub Actions CI/CD publishing with SLSA provenance; publisher-changed to GitHub Actions is expected and stable for this package going forward. ai
maintainer-change maintainer-added AI (maintainer-change): lachlancollins is a known TanStack contributor; this is a legitimate team expansion for the TanStack org, not a suspicious takeover. ai
phantom-deps phantom-dep:tiny-warning AI (phantom-deps): tiny-warning is declared as a runtime dependency in package.json; the phantom-dep finding is a false positive for this package. ai
bogus-package bogus-package AI (bogus-package): TanStack monorepo sub-packages routinely have minimal READMEs that defer to the main docs site. Not a spam/phishing indicator for this established ecosystem package. ai

Versions (showing 100 of 358)

Version Deps Published
1.170.14 4 / 2
1.170.13 4 / 2
1.170.12 4 / 2
1.170.11 4 / 2
1.170.10 4 / 2
1.170.9 4 / 2
1.170.8 4 / 2
1.170.7 4 / 2
1.170.6 4 / 2
1.170.5 4 / 2
1.170.4 4 / 2
1.170.3 4 / 2
1.170.2 4 / 2
1.170.1 4 / 2
1.170.0 4 / 2
1.169.4 4 / 2
1.169.3 4 / 2
1.169.2 4 / 2
1.169.1 4 / 2
1.169.0 4 / 2
1.168.2 4 / 2
1.168.1 4 / 3
1.168.0 4 / 3
1.167.22 4 / 3
1.167.21 4 / 3
1.167.20 4 / 3
1.167.19 4 / 3
1.167.18 4 / 3
1.167.17 4 / 3
1.167.16 4 / 3
1.167.15 4 / 3
1.167.14 4 / 3
1.167.13 4 / 3
1.167.12 4 / 3
1.167.11 4 / 3
1.167.10 4 / 3
1.167.9 4 / 3
1.167.8 4 / 3
1.167.7 4 / 3
1.167.6 4 / 3
1.167.5 4 / 3
1.167.4 4 / 3
1.167.3 4 / 2
1.167.2 4 / 2
1.167.1 6 / 2
1.167.0 6 / 2
1.166.13 6 / 2
1.166.12 6 / 2
1.166.11 6 / 1
1.166.10 6 / 1
1.166.9 6 / 1
1.166.8 6 / 1
1.166.7 6 / 1
1.166.6 6 / 1
1.166.4 6 / 1
1.166.2 6 / 1
1.164.1 6 / 1
1.163.3 6 / 1
1.163.2 6 / 1
1.162.9 6 / 1
1.162.6 6 / 1
1.162.5 6 / 1
1.162.2 6 / 1
1.162.1 6 / 1
1.161.4 6 / 1
1.161.3 6 / 0
1.161.1 6 / 0
1.160.0 6 / 0
1.159.9 6 / 0
1.159.6 6 / 0
1.159.4 6 / 0
1.158.4 6 / 0
1.158.3 6 / 0
1.158.1 6 / 0
1.158.0 6 / 0
1.157.18 6 / 0
1.157.16 6 / 0
1.157.15 6 / 0
1.157.14 6 / 0
1.157.13 6 / 0
1.157.12 6 / 0
1.157.11 6 / 0
1.157.10 6 / 0
1.157.9 6 / 0
1.157.8 6 / 0
1.157.7 6 / 0
1.157.6 6 / 0
1.157.5 6 / 0
1.157.4 6 / 0
1.157.3 6 / 0
1.157.1 6 / 0
1.157.0 6 / 0
1.156.0 6 / 0
1.155.0 6 / 0
1.154.14 6 / 0
1.154.13 6 / 0
1.154.12 6 / 0
1.154.8 6 / 0
1.154.7 6 / 0
1.154.4 6 / 0
Showing 100 of 358 Next page →

v1.170.14

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.170.13

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.