@tanstack/start-storage-context
Modern and scalable routing for React applications
Supply chain provenance
Status for the latest visible version.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): TanStack migrated to GitHub Actions CI/CD publishing; SLSA provenance attestation confirms trusted build environment. This pattern is stable for this package going forward. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): lachlancollins is a known TanStack contributor; addition is consistent with normal open-source project growth for this org. | ai | |
| bogus-package | bogus-package | AI (bogus-package): TanStack monorepo sub-packages routinely have minimal READMEs that defer to the main docs site. Not indicative of spam or phishing given SLSA provenance and established ecosystem presence. | ai | |
| dependencies | unvetted-dep:@tanstack/router-core | AI (dependencies): @tanstack/router-core is a sibling package in the same TanStack/router monorepo; the dependency is expected and legitimate. | ai |
Versions (showing 48 of 248)
| Version | Deps | Published |
|---|---|---|
| 1.131.38 | 1 / 0 | |
| 1.131.37 | 1 / 0 | |
| 1.131.36 | 1 / 0 | |
| 1.131.35 | 1 / 0 | |
| 1.131.34 | 1 / 0 | |
| 1.131.33 | 1 / 0 | |
| 1.131.32 | 1 / 0 | |
| 1.131.30 | 1 / 0 | |
| 1.131.28 | 1 / 0 | |
| 1.131.27 | 1 / 0 | |
| 1.131.26 | 1 / 0 | |
| 1.131.25 | 1 / 0 | |
| 1.131.24 | 1 / 0 | |
| 1.131.23 | 1 / 0 | |
| 1.131.22 | 1 / 0 | |
| 1.131.21 | 1 / 0 | |
| 1.131.19 | 1 / 0 | |
| 1.131.18 | 1 / 0 | |
| 1.131.17 | 1 / 0 | |
| 1.131.16 | 1 / 0 | |
| 1.131.14 | 1 / 0 | |
| 1.131.13 | 1 / 0 | |
| 1.131.12 | 1 / 0 | |
| 1.131.7 | 1 / 0 | |
| 1.131.5 | 1 / 0 | |
| 1.131.4 | 1 / 0 | |
| 1.131.3 | 1 / 0 | |
| 1.131.2 | 1 / 0 | |
| 1.130.17 | 1 / 0 | |
| 1.130.12 | 1 / 0 | |
| 1.130.11 | 1 / 0 | |
| 1.130.10 | 1 / 0 | |
| 1.130.9 | 1 / 0 | |
| 1.130.8 | 1 / 0 | |
| 1.130.7 | 1 / 0 | |
| 1.130.6 | 1 / 0 | |
| 1.130.5 | 1 / 0 | |
| 1.130.2 | 1 / 0 | |
| 1.130.1 | 1 / 0 | |
| 1.130.0 | 1 / 0 | |
| 1.129.9 | 1 / 0 | |
| 1.129.8 | 1 / 0 | |
| 1.129.7 | 1 / 0 | |
| 1.129.5 | 1 / 0 | |
| 1.129.4 | 1 / 0 | |
| 1.129.3 | 1 / 0 | |
| 1.129.2 | 1 / 0 | |
| 1.129.0 | 1 / 0 |
v1.131.35
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.131.17
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.131.4
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.130.6
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v1.129.7
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.