registry / @tanstack/router-cli / 1.167.33

@tanstack/router-cli@1.167.33

Modern and scalable routing for React applications

AI Security Review

scanned 5d ago · by lpm-firewall-ai

No confirmed malicious attack surface. The package is a user-invoked route-generation CLI and optional file watcher.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs the tsr generate or tsr watch command.

Impact

Expected project route-generation activity; no package-contained exfiltration, persistence, or install-time execution was found.

Mechanism

Invokes the declared router generator for the current project and watches configured route files.

Rationale

Direct inspection shows an ordinary TanStack router CLI with explicit generate/watch commands and no malicious primitives or lifecycle hooks. The static dependency-bridge finding is explained by the declared @tanstack/router-generator dependency.

Evidence

package.jsonbin/tsr.cjssrc/index.tssrc/generate.tssrc/watch.tsdist/cjs/generate.cjs

Decision evidence

public snapshot

AI called this Clean at 97.0% confidence as Benign with low false-positive risk.

Evidence for block

CLI exposes only explicit generate and watch commands.
Generation delegates to the declared TanStack router-generator dependency.

@tanstack/router-cli@1.167.33

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code