← Home

@tanstack/vue-start-client

npm Repository Homepage

Modern and scalable routing for Vue applications

100
Versions
MIT
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

tannerlinsleyalemtuzlakkevinvandy

Keywords

vuelocationrouterroutingasyncasync routertypescript

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
maintainer-change maintainer-added AI (maintainer-change): schiller-manuel is a legitimate TanStack team member addition; package is published from the official TanStack/router GitHub repo with SLSA provenance. ai
provenance publisher-changed AI (provenance): TanStack monorepo transitioned to GitHub Actions CI/CD publishing; SLSA provenance attestation confirms integrity. This pattern is stable for this package going forward. ai
phantom-deps phantom-dep:tiny-warning AI (phantom-deps): tiny-warning is a legitimate, widely-used utility; phantom detection likely reflects transitive/build-config usage rather than a missing or malicious dep. ai
phantom-deps phantom-dep:tiny-invariant AI (phantom-deps): tiny-invariant is a legitimate, widely-used utility; phantom detection likely reflects transitive/build-config usage rather than a missing or malicious dep. ai
dependencies unvetted-dep:@tanstack/router-core AI (dependencies): First-party TanStack sibling package from the same monorepo (TanStack/router); unvetted status reflects review queue lag, not a security concern. ai
dependencies unvetted-dep:@tanstack/start-client-core AI (dependencies): First-party TanStack sibling package from the same monorepo (TanStack/router); unvetted status reflects review queue lag, not a security concern. ai
dependencies unvetted-dep:@tanstack/vue-router AI (dependencies): First-party TanStack sibling package from the same monorepo (TanStack/router); unvetted status reflects review queue lag, not a security concern. ai

Versions (showing 100 of 100)

Version Deps Published
1.167.19 3 / 3
1.167.18 3 / 3
1.167.17 3 / 3
1.167.16 3 / 3
1.167.15 3 / 3
1.167.14 3 / 3
1.167.13 3 / 3
1.167.12 3 / 5
1.167.11 3 / 5
1.167.10 3 / 5
1.167.9 3 / 5
1.167.8 3 / 5
1.167.7 3 / 5
1.167.6 3 / 5
1.167.5 3 / 5
1.167.4 3 / 5
1.167.3 3 / 5
1.167.2 3 / 5
1.167.1 3 / 5
1.167.0 3 / 5
1.166.43 3 / 5
1.166.42 3 / 5
1.166.41 3 / 5
1.166.40 3 / 5
1.166.39 3 / 5
1.166.38 3 / 5
1.166.37 3 / 5
1.166.36 3 / 5
1.166.35 3 / 5
1.166.34 3 / 5
1.166.33 3 / 5
1.166.32 3 / 5
1.166.31 3 / 5
1.166.30 3 / 5
1.166.29 3 / 5
1.166.28 3 / 5
1.166.27 3 / 5
1.166.26 3 / 5
1.166.25 3 / 5
1.166.24 3 / 5
1.166.23 3 / 5
1.166.22 3 / 5
1.166.21 3 / 5
1.166.20 3 / 5
1.166.19 3 / 5
1.166.18 3 / 5
1.166.17 3 / 5
1.166.16 3 / 5
1.166.15 5 / 5
1.166.14 5 / 5
1.166.13 5 / 5
1.166.12 5 / 5
1.166.11 5 / 5
1.166.10 5 / 5
1.166.9 5 / 5
1.166.8 5 / 5
1.166.7 5 / 5
1.166.6 5 / 5
1.166.5 5 / 5
1.166.4 5 / 5
1.166.2 5 / 5
1.164.1 5 / 5
1.163.3 5 / 5
1.163.2 5 / 5
1.162.9 5 / 5
1.162.8 5 / 5
1.162.6 5 / 5
1.162.5 5 / 5
1.162.4 5 / 5
1.162.2 5 / 5
1.162.1 5 / 5
1.161.4 5 / 5
1.161.3 5 / 4
1.161.1 5 / 4
1.160.0 5 / 4
1.159.10 5 / 4
1.159.9 5 / 4
1.159.6 5 / 4
1.159.5 5 / 4
1.159.4 5 / 4
1.159.3 5 / 4
1.158.4 5 / 4
1.158.3 5 / 4
1.158.1 5 / 4
1.158.0 5 / 4
1.157.18 5 / 4
1.157.17 5 / 4
1.157.16 5 / 4
1.157.13 5 / 4
1.157.3 5 / 4
1.157.1 5 / 4
1.153.1 5 / 4
1.151.1 5 / 4
1.148.0 5 / 4
1.145.11 5 / 4
1.145.7 5 / 4
1.143.12 5 / 4
1.143.6 5 / 4
1.141.1 5 / 4
0.0.1 0 / 0

v1.167.19

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.167.18

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.