registry / @tanstack/router-cli / 1.167.30

@tanstack/router-cli@1.167.30

Modern and scalable routing for React applications

AI Security Review

scanned 13d ago · by lpm-firewall-ai

No confirmed malicious attack surface. The package is a user-invoked route-generation CLI; its watch behavior is limited to configured route files.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs the tsr generate or tsr watch command.

Impact

No package-owned exfiltration, persistence, remote execution, or install-time mutation established.

Mechanism

Route generation and local filesystem watching

Rationale

Source and compiled entrypoints align as a TanStack route-generator CLI with explicit generate/watch commands. Scanner hints do not establish malicious behavior.

Evidence

package.jsonbin/tsr.cjssrc/index.tssrc/generate.tssrc/watch.tsdist/cjs/index.cjsdist/cjs/generate.cjsdist/cjs/watch.cjs

Decision evidence

public snapshot

AI called this Clean at 97.0% confidence as Benign with low false-positive risk.

Evidence for block

Manifest exposes a user-invoked tsr binary and contains no lifecycle hooks.

@tanstack/router-cli@1.167.30

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code