← Home

@tanstack/solid-start

npm Repository Homepage
100
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

tannerlinsleytkdodoalemtuzlakkevinvandyschiller-manuel

Keywords

solidlocationrouterroutingasyncasync routertypescript

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
dependencies unvetted-dep:@tanstack/solid-start-plugin AI (dependencies): Internal @tanstack monorepo dependency released in lockstep; same publisher, no independent risk. ai
dependencies unvetted-dep:@tanstack/start-api-routes AI (dependencies): Internal TanStack monorepo sub-package, co-published with same version. ai
dependencies unvetted-dep:@tanstack/solid-start-config AI (dependencies): Internal TanStack monorepo sub-package, co-published with same version. ai
dependencies unvetted-dep:@tanstack/start-server-functions-ssr AI (dependencies): Internal TanStack monorepo sub-package, co-published with same version. ai
dependencies unvetted-dep:@tanstack/solid-start-router-manifest AI (dependencies): Internal TanStack monorepo sub-package, co-published with same version. ai
dependencies unvetted-dep:@tanstack/start-server-functions-server AI (dependencies): Internal TanStack monorepo sub-package, co-published alongside this release. ai
dependencies unvetted-dep:@tanstack/start-server-functions-handler AI (dependencies): Internal TanStack monorepo sub-package, co-published with same version. ai
dependencies unvetted-dep:@tanstack/start-server-functions-client AI (dependencies): Internal TanStack monorepo sub-package, co-published with same version. ai
provenance publisher-changed AI (provenance): TanStack/router migrated to GitHub Actions CI/CD publishing with SLSA provenance attestation — this is a supply chain improvement, not a compromise signal. Stable for this package going forward. ai
maintainer-change maintainer-added AI (maintainer-change): lachlancollins is a known TanStack contributor. Adding maintainers to an active OSS project is routine and expected. ai

Versions (showing 100 of 422)

Version Deps Published
1.136.6 7 / 2
1.136.5 7 / 2
1.136.4 7 / 2
1.136.3 7 / 2
1.136.2 7 / 2
1.136.1 7 / 2
1.136.0 7 / 2
1.135.2 7 / 2
1.135.1 7 / 2
1.135.0 7 / 2
1.134.20 7 / 2
1.134.19 7 / 2
1.134.18 7 / 2
1.134.17 7 / 2
1.134.16 7 / 2
1.134.15 7 / 2
1.134.14 7 / 2
1.134.13 7 / 2
1.134.12 7 / 2
1.134.11 7 / 2
1.134.10 7 / 2
1.134.9 7 / 2
1.134.8 7 / 2
1.134.7 7 / 2
1.134.6 7 / 2
1.134.5 7 / 2
1.134.4 7 / 2
1.134.3 7 / 2
1.134.2 7 / 2
1.134.1 7 / 2
1.134.0 7 / 2
1.133.37 7 / 2
1.133.36 7 / 2
1.133.35 7 / 2
1.133.34 7 / 2
1.133.32 7 / 2
1.133.31 7 / 2
1.133.30 7 / 2
1.133.29 7 / 2
1.133.28 7 / 2
1.133.27 7 / 2
1.133.26 7 / 2
1.133.25 7 / 2
1.133.24 7 / 2
1.133.23 7 / 2
1.133.22 7 / 2
1.133.21 7 / 2
1.133.20 7 / 2
1.133.19 7 / 2
1.133.18 7 / 2
1.133.15 7 / 2
1.133.14 7 / 2
1.133.13 7 / 2
1.133.12 7 / 2
1.133.11 7 / 2
1.133.10 7 / 2
1.133.9 7 / 2
1.133.8 7 / 2
1.133.7 7 / 2
1.133.6 7 / 2
1.133.5 7 / 2
1.133.4 7 / 2
1.133.3 7 / 2
1.133.2 7 / 2
1.132.56 7 / 2
1.132.55 7 / 2
1.132.54 7 / 2
1.132.53 7 / 2
1.132.52 7 / 2
1.132.51 7 / 2
1.132.49 7 / 2
1.132.48 7 / 2
1.132.47 7 / 2
1.132.45 7 / 2
1.132.43 7 / 2
1.132.42 7 / 2
1.132.41 7 / 2
1.132.40 7 / 2
1.132.38 7 / 2
1.132.37 7 / 2
1.132.36 7 / 2
1.132.35 7 / 2
1.132.34 7 / 2
1.132.33 7 / 2
1.132.32 7 / 2
1.132.31 7 / 2
1.132.29 7 / 2
1.132.28 7 / 2
1.132.27 7 / 2
1.132.26 7 / 2
1.132.25 7 / 2
1.132.24 7 / 2
1.132.23 7 / 2
1.132.22 7 / 2
1.132.21 7 / 2
1.132.19 7 / 2
1.132.18 7 / 2
1.132.17 7 / 2
1.132.16 7 / 2
1.132.15 7 / 2
Showing 100 of 422 Next page →

v1.133.36

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.133.28

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.133.23

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.133.18

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.133.13

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.133.10

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.133.5

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.132.55

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.132.49

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.132.40

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.132.35

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.132.25

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.