Static Scan Results
scanned 12d ago · by rust-scannerStatic analysis flagged 4 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
WildcardDependency
Source & flagged code
1 flagged · loading sourcedist/cjs/generate.cjsView file
1package = @tanstack/router-cli; repositoryIdentity = router; dependency = @tanstack/router-generator
L1: let _tanstack_router_generator = require("@tanstack/router-generator");
L2: //#region src/generate.ts
High
Copied Package Dependency Bridge
Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
dist/cjs/generate.cjsView on unpkg · L1Findings
1 High2 Medium1 Low
HighCopied Package Dependency Bridgedist/cjs/generate.cjs
MediumStructural Risk Force Deep Review
MediumWildcard Dependency
LowScripts Present