@tanstack/virtual-file-routes

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, so the linkage is less transparent; this is a caution even though monorepo subpackages commonly use shared repositories.

Security policycaution

No security policy was found, leaving vulnerability-reporting expectations less transparent despite the repository's active maintenance and security scanning.

Workflow auditcaution

All eight workflows were analyzed with no high- or medium-severity findings and all 30 action references pinned. Two high-confidence low-severity adhoc-package findings and three workflows with top-level write permissions are minor hygiene concerns.