← Home

@tanstack/react-start-client

npm Repository Homepage
100
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

tannerlinsleytkdodoalemtuzlakkevinvandyschiller-manuel

Keywords

reactlocationrouterroutingasyncasync routertypescript

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:cookie-es AI (phantom-deps): Used in server-side config context; stable false positive for this package. ai
phantom-deps phantom-dep:jsesc AI (phantom-deps): Used in bundler/config context, not direct import; stable pattern for this package. ai
phantom-deps phantom-dep:vinxi AI (phantom-deps): vinxi is a build/runtime framework dependency used in config; not a direct import by design. ai
phantom-deps phantom-dep:tiny-warning AI (phantom-deps): tiny-warning is a declared dependency; phantom-dep detection is a low-signal finding with no security implication. ai
provenance publisher-changed AI (provenance): TanStack moved to GitHub Actions CI/CD publishing with SLSA provenance; this is a legitimate and expected transition for the project. ai
maintainer-change maintainer-added AI (maintainer-change): lachlancollins is a known TanStack collaborator/maintainer across multiple TanStack packages. ai
provenance slsa-provenance AI (provenance): TanStack packages are consistently published via CI with SLSA provenance; this is expected and stable for all versions of this package. ai

Versions (showing 100 of 384)

Version Deps Published
1.136.1 5 / 2
1.136.0 5 / 2
1.135.2 5 / 2
1.135.0 5 / 2
1.134.20 5 / 2
1.134.18 5 / 2
1.134.17 5 / 2
1.134.15 5 / 2
1.134.13 5 / 2
1.134.12 5 / 2
1.134.10 5 / 2
1.134.9 5 / 2
1.134.4 5 / 2
1.133.36 5 / 2
1.133.35 5 / 2
1.133.32 5 / 2
1.133.28 5 / 2
1.133.27 5 / 2
1.133.25 5 / 2
1.133.22 5 / 2
1.133.21 5 / 2
1.133.20 5 / 2
1.133.19 5 / 2
1.133.18 5 / 2
1.133.15 5 / 2
1.133.13 5 / 2
1.133.12 5 / 2
1.133.10 5 / 2
1.133.8 5 / 2
1.133.7 5 / 2
1.133.5 5 / 2
1.133.3 5 / 2
1.133.2 5 / 2
1.132.54 5 / 2
1.132.48 5 / 2
1.132.47 5 / 2
1.132.45 5 / 2
1.132.43 5 / 2
1.132.41 5 / 2
1.132.37 5 / 2
1.132.36 5 / 2
1.132.33 5 / 2
1.132.32 5 / 2
1.132.31 5 / 2
1.132.29 5 / 2
1.132.27 5 / 2
1.132.26 5 / 2
1.132.25 5 / 2
1.132.23 5 / 2
1.132.21 5 / 2
1.132.19 5 / 2
1.132.17 5 / 2
1.132.16 5 / 2
1.132.15 5 / 2
1.132.12 5 / 2
1.132.11 5 / 2
1.132.10 5 / 2
1.132.7 5 / 2
1.132.6 5 / 2
1.132.4 5 / 2
1.132.3 5 / 2
1.132.2 5 / 2
1.132.1 6 / 2
1.132.0 6 / 2
1.131.50 6 / 2
1.131.49 6 / 2
1.131.48 6 / 2
1.131.47 6 / 2
1.131.46 6 / 2
1.131.45 6 / 2
1.131.44 6 / 2
1.131.41 6 / 2
1.131.40 6 / 2
1.131.39 6 / 2
1.131.38 6 / 2
1.131.37 6 / 2
1.131.36 6 / 2
1.131.35 6 / 2
1.131.34 6 / 2
1.131.33 6 / 2
1.131.32 6 / 2
1.131.31 6 / 2
1.131.30 6 / 2
1.131.28 6 / 2
1.131.27 6 / 2
1.131.26 6 / 2
1.131.25 6 / 2
1.131.24 6 / 2
1.131.23 6 / 2
1.131.22 6 / 2
1.131.21 6 / 2
1.131.19 6 / 2
1.131.18 6 / 2
1.131.17 6 / 2
1.131.16 6 / 2
1.131.14 6 / 2
1.131.13 6 / 2
1.131.12 6 / 2
1.131.10 6 / 2
1.131.8 6 / 2
Showing 100 of 384 Next page →

v1.133.25

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.133.8

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.132.54

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.132.36

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.132.23

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.132.7

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.131.49

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.131.39

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.131.26

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.131.19

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.