registry / @tanstack/start-static-server-functions / 1.167.28

@tanstack/start-static-server-functions@1.167.28

Modern and scalable routing for React applications

AI Security Review

scanned 22d ago · by lpm-firewall-ai

No confirmed malicious attack surface. Runtime middleware writes application static-cache data only when configured for production and fetches only a relative cache path.

Static reason

No blocking static signals were detected.; source fingerprint signature matched known malicious package; routed for review

Trigger

Application invokes the exported middleware in production with TSS_CLIENT_OUTPUT_DIR configured.

Impact

Writes serialized cache JSON below the configured client output directory; no external network target or credential collection is present.

Mechanism

Static server-function result caching.

Rationale

The package exports static middleware with scoped cache reads and writes, not install-time or covert behavior. Scanner network, environment, and hash signals correspond to this cache implementation.

Evidence

package.jsonsrc/index.tssrc/staticFunctionMiddleware.tsdist/esm/staticFunctionMiddleware.js/__tsr/staticServerFnCache/<sha1>.json

Decision evidence

public snapshot

AI called this Clean at 98.0% confidence as Benign with low false-positive risk.

Evidence for block

No malicious behavior found after source and manifest inspection.

@tanstack/start-static-server-functions@1.167.28

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code