← Home

@tanstack/start-plugin-core

100
Versions
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

tannerlinsleytkdodoalemtuzlakkevinvandyschiller-manuel

Keywords

solidreactlocationrouterroutingasyncasync routertypescript

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:@types/babel__core AI (phantom-deps): Type-only dep loaded by convention in this build tooling package; stable false positive. ai
phantom-deps phantom-dep:@types/babel__code-frame AI (phantom-deps): Type-only dep loaded by convention; stable false positive for this package. ai
dependencies unvetted-dep:@tanstack/server-functions-plugin AI (dependencies): Sibling package within the TanStack org monorepo; routinely published alongside this package. Not an independent third-party dependency. ai
bogus-package bogus-package AI (bogus-package): This is a monorepo sub-package from TanStack; sparse README is expected as docs live at tanstack.com/start. Not a spam or phishing package. ai
phantom-deps phantom-dep:@rolldown/pluginutils AI (phantom-deps): Build plugin package; @rolldown/pluginutils is a declared dependency used in config/build tooling context, not necessarily directly imported in source. ai
phantom-deps phantom-dep:@tanstack/start-client-core AI (phantom-deps): Same-org sibling package used conditionally in the plugin; phantom detection is a false positive for this monorepo package. ai

Versions (showing 100 of 422)

Version Deps Published
1.146.3 20 / 3
1.146.2 20 / 3
1.146.1 20 / 3
1.146.0 20 / 3
1.145.11 20 / 3
1.145.10 20 / 3
1.145.9 20 / 3
1.145.8 20 / 3
1.145.7 20 / 3
1.145.6 20 / 3
1.145.5 20 / 3
1.145.4 20 / 3
1.145.3 20 / 3
1.145.2 20 / 3
1.145.1 20 / 3
1.145.0 20 / 3
1.144.0 20 / 3
1.143.12 20 / 3
1.143.11 20 / 3
1.143.10 20 / 3
1.143.9 20 / 3
1.143.8 20 / 3
1.143.7 20 / 3
1.143.6 20 / 3
1.143.5 20 / 3
1.143.4 21 / 3
1.143.3 21 / 3
1.143.2 21 / 3
1.143.1 21 / 3
1.143.0 21 / 3
1.142.13 21 / 3
1.142.12 21 / 3
1.142.11 21 / 3
1.142.10 21 / 3
1.142.8 21 / 3
1.142.7 21 / 3
1.142.6 21 / 3
1.142.5 21 / 3
1.142.4 21 / 3
1.142.3 21 / 3
1.142.2 21 / 3
1.142.1 21 / 3
1.142.0 21 / 3
1.141.9 21 / 3
1.141.8 21 / 3
1.141.7 21 / 3
1.141.6 21 / 3
1.141.5 21 / 3
1.141.4 21 / 3
1.141.3 21 / 3
1.141.2 21 / 3
1.141.1 21 / 3
1.141.0 21 / 3
1.140.5 21 / 3
1.140.4 21 / 3
1.140.3 21 / 3
1.140.2 21 / 3
1.140.1 21 / 3
1.140.0 21 / 3
1.139.14 21 / 3
1.139.13 21 / 3
1.139.12 21 / 3
1.139.11 21 / 3
1.139.10 21 / 3
1.139.9 21 / 3
1.139.8 21 / 3
1.139.7 21 / 3
1.139.6 21 / 3
1.139.5 21 / 3
1.139.4 21 / 3
1.139.3 21 / 3
1.139.2 21 / 3
1.139.1 21 / 3
1.139.0 21 / 3
1.138.0 21 / 3
1.137.0 21 / 3
1.136.18 21 / 3
1.136.17 21 / 3
1.136.16 21 / 3
1.136.15 21 / 3
1.136.14 21 / 3
1.136.13 21 / 3
1.136.11 21 / 3
1.136.10 21 / 3
1.136.9 21 / 3
1.136.8 21 / 3
1.136.7 21 / 3
1.136.6 21 / 3
1.136.5 21 / 3
1.136.4 21 / 3
1.136.3 21 / 3
1.136.2 21 / 3
1.136.1 21 / 3
1.136.0 21 / 3
1.135.2 21 / 3
1.135.1 21 / 3
1.135.0 21 / 3
1.134.20 21 / 3
1.134.18 21 / 3
1.134.17 21 / 3
Showing 100 of 422 Next page →

v1.145.8

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.140.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.137.0

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v1.136.3

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.