registry / @tanstack/start-static-server-functions / 1.167.30

@tanstack/start-static-server-functions@1.167.30

Modern and scalable routing for React applications

AI Security Review

scanned 17d ago · by lpm-firewall-ai

No confirmed malicious attack surface. The package implements production static cache generation and reads that cache through a same-origin relative path.

Static reason

No blocking static signals were detected.; source fingerprint signature matched known malicious package; routed for review

Trigger

Application runtime invokes the exported middleware in production with TSS_CLIENT_OUTPUT_DIR configured.

Impact

Writes cache JSON to the configured application output directory; no external exfiltration or install-time action observed.

Mechanism

Static server-function cache serialization and retrieval.

Rationale

Source inspection shows a static-cache middleware, not malicious behavior. The flagged filesystem, environment, and fetch primitives are constrained to the configured build output and a relative cache URL.

Evidence

package.jsonsrc/index.tssrc/staticFunctionMiddleware.tsdist/esm/staticFunctionMiddleware.js

Decision evidence

public snapshot

AI called this Clean at 99.0% confidence as Benign with low false-positive risk.

Evidence for block

Evidence against

package.json has no preinstall, install, or postinstall hook.

@tanstack/start-static-server-functions@1.167.30

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code