@tanstack/router-utils

This is a healthy, actively maintained release with strong evidence of ongoing development, organizational backing, reproducible npm provenance, stable versioning, and solid package structure. The repository is actively maintained with 145 commits from 11 contributors in the last 3 months, while the package has 23 releases in the last 12 months and no deprecation status. The main concerns are that the package is not named directly in the linked repository README, the repository lacks a security policy, and three workflows grant top-level write permissions; these reduce transparency and hardening but are outweighed by the repository's active maintenance, security scanning, safe workflow analysis, tests, changelog, and organization ownership.

Latest 1.162.3

NPM

88%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

Supply Chain

Attestations

100

Are you affected? Scan for Free

Malware detected in 2 versions

Latest:v1.161.14, detected 4 months ago

Health Score Breakdown

Repo package mention

The repository name does not match the package and its README does not mention the package, creating some uncertainty that this specific package is represented by the linked repository; the mismatch may still reflect a monorepo sub-package.

Security policy

No SECURITY.md policy was found, leaving vulnerability-reporting and response expectations less transparent for dependents.

Token permissions

All workflows declare permissions, but 3 of 8 workflows have top-level write permissions; although no dangerous workflow patterns were detected, narrower permissions would be preferable.