registry / @tanstack/router-cli / 1.167.32

@tanstack/router-cli@1.167.32

Modern and scalable routing for React applications

AI Security Review

scanned 7d ago · by lpm-firewall-ai

No confirmed malicious attack surface. This is a user-invoked route-generation CLI that delegates generation and route watching to its named dependency.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs the tsr generate or tsr watch command.

Impact

Generates or updates route artifacts as requested by the user; no exfiltration, remote payload, persistence, or destructive behavior is established.

Mechanism

CLI route generation and configured-directory file watching.

Rationale

Static inspection shows ordinary TanStack Router CLI dispatch, generation, and file-watch behavior with no install hook or concrete malicious chain. The dependency bridge is package-aligned and not evidence of malicious behavior.

Evidence

package.jsonbin/tsr.cjssrc/index.tssrc/generate.tssrc/watch.tsdist/cjs/index.cjsdist/cjs/generate.cjsdist/cjs/watch.cjs

Decision evidence

public snapshot

AI called this Clean at 98.0% confidence as Benign with low false-positive risk.

Evidence for block

No preinstall, install, postinstall, or prepare lifecycle hook is declared.

@tanstack/router-cli@1.167.32

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code