@tanstack/react-start-client

Repo package mentioncaution

The repository name does not match this subpackage and its README does not mention the package, creating a repository-association caution; the package documentation identifies it as a TanStack React Start dependency, partly compensating for the monorepo mismatch.

Security policycaution

No repository security policy was found, which is a modest transparency gap, although the available tooling and provenance provide compensating evidence.

Workflow auditcaution

All nine workflows were analyzed with no high- or medium-severity findings and all action references pinned. Three workflows have broad top-level write permissions, and high-confidence adhoc-package findings add minor hygiene risk.