@tanstack/router-utils

Repo package mentioncaution

The repository name does not match the package name and its README does not mention this package, so the package-to-repository relationship is less transparent; the organization and active monorepo context partly compensate.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations and response procedures less transparent.

Workflow auditcaution

All nine workflows were analyzed with no high- or medium-severity findings, no untrusted checkouts, no script injection, and all 33 action references pinned. Three high-confidence low-severity adhoc-package findings and three workflows with top-level write permissions are modest hygiene concerns.