registry / @tanstack/start-static-server-functions / 1.167.32

@tanstack/start-static-server-functions@1.167.32

Modern and scalable routing for React applications

AI Security Review

scanned 13d ago · by lpm-firewall-ai

No confirmed malicious attack surface. The package implements production static server-function cache generation and retrieval.

Static reason

No blocking static signals were detected.; source fingerprint signature matched known malicious package; routed for review

Trigger

Application middleware execution in production; cache writes additionally require TSS_CLIENT_OUTPUT_DIR.

Impact

Expected build/output cache files and same-origin cache reads.

Mechanism

Writes and fetches serialized static cache entries.

Rationale

Direct inspection found a small middleware package whose filesystem and fetch behavior is limited to configured static-cache generation. No install-time execution, exfiltration, payload loading, or malicious control-surface mutation was found.

Evidence

package.jsonsrc/staticFunctionMiddleware.tssrc/index.tsdist/esm/staticFunctionMiddleware.jsTSS_CLIENT_OUTPUT_DIR/__tsr/staticServerFnCache/<sha1>.json

Decision evidence

public snapshot

AI called this Clean at 98.0% confidence as Benign with low false-positive risk.

Evidence for block

Manifest has no preinstall/install/postinstall hook.

@tanstack/start-static-server-functions@1.167.32

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code