{"id":176174955,"number":"1.163.3","published_at":"2026-02-27T22:15:41.276Z","licenses":"MIT","integrity":"sha512-5AVVClUzVLbZz6ksn8+KLYdnnl/3+PjkrdIO7sd835IChmcbgAI64Qit7UeNXqtKxRo3x1r35sKaimgrFi6Hbg==","status":null,"download_url":"https://registry.npmjs.org/@tanstack/start-server-core/-/start-server-core-1.163.3.tgz","registry_url":"https://www.npmjs.com/package/@tanstack/start-server-core/v/1.163.3","documentation_url":null,"install_command":"npm install @tanstack/start-server-core@1.163.3","immutable":null,"metadata":{"deprecated":null,"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:915e6def-682c-4a85-a777-cc03c12f60db"}},"dist":{"integrity":"sha512-5AVVClUzVLbZz6ksn8+KLYdnnl/3+PjkrdIO7sd835IChmcbgAI64Qit7UeNXqtKxRo3x1r35sKaimgrFi6Hbg==","shasum":"65eff8fd16c978df1b1040808ed0785bb91f1481","tarball":"https://registry.npmjs.org/@tanstack/start-server-core/-/start-server-core-1.163.3.tgz","fileCount":63,"unpackedSize":238606,"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@tanstack%2fstart-server-core@1.163.3","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEQCIHwvRT3Dg+xWSstMiKbzg6sSikMrYNTV4KEwZDJ6FIpMAiAcKKiWo0VXE9ZV0+1oJfHxhS7iyYxRAiJJgcYScwz5WA=="}]},"gitHead":null,"main":null,"scripts":{"clean":"rimraf ./dist \u0026\u0026 rimraf ./coverage","test":"pnpm test:eslint \u0026\u0026 pnpm test:types \u0026\u0026 pnpm test:build \u0026\u0026 pnpm test:unit","test:unit":"vitest","test:eslint":"eslint ./src","test:types":"pnpm run \"/^test:types:ts[0-9]{2}$/\"","test:types:ts54":"node ../../node_modules/typescript54/lib/tsc.js","test:types:ts55":"node ../../node_modules/typescript55/lib/tsc.js","test:types:ts56":"node ../../node_modules/typescript56/lib/tsc.js","test:types:ts57":"node ../../node_modules/typescript57/lib/tsc.js","test:types:ts58":"node ../../node_modules/typescript58/lib/tsc.js","test:types:ts59":"tsc","test:build":"publint --strict \u0026\u0026 attw --ignore-rules no-resolution --pack .","build":"vite build"},"_npmVersion":"11.6.0","_nodeVersion":"24.8.0","_hasShrinkwrap":false,"directories":{},"engines":{"node":"\u003e=22.12.0"},"exports":{".":{"import":{"types":"./dist/esm/index.d.ts","default":"./dist/esm/index.js"}},"./createServerRpc":{"import":{"types":"./dist/esm/createServerRpc.d.ts","default":"./dist/esm/createServerRpc.js"}},"./createSsrRpc":{"import":{"types":"./dist/esm/createSsrRpc.d.ts","default":"./dist/esm/createSsrRpc.js"}},"./package.json":"./package.json"},"browserify":null},"created_at":"2026-02-28T23:24:17.066Z","updated_at":"2026-02-28T23:24:19.906Z","purl":"pkg:npm/%40tanstack/start-server-core@1.163.3","related_tag":null,"latest":false,"version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@tanstack%2Fstart-server-core/versions/1.163.3","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@tanstack%2Fstart-server-core/versions/1.163.3/codemeta","dependencies":[{"id":1936853918,"ecosystem":"npm","package_name":"h3-v2","requirements":"npm:h3@2.0.1-rc.14","kind":"runtime","optional":false},{"id":1936853919,"ecosystem":"npm","package_name":"seroval","requirements":"^1.4.2","kind":"runtime","optional":false},{"id":1936853920,"ecosystem":"npm","package_name":"tiny-invariant","requirements":"^1.3.3","kind":"runtime","optional":false},{"id":1936853921,"ecosystem":"npm","package_name":"@tanstack/history","requirements":"1.161.4","kind":"runtime","optional":false},{"id":1936853922,"ecosystem":"npm","package_name":"@tanstack/router-core","requirements":"1.163.3","kind":"runtime","optional":false},{"id":1936853923,"ecosystem":"npm","package_name":"@tanstack/start-client-core","requirements":"1.163.3","kind":"runtime","optional":false},{"id":1936853924,"ecosystem":"npm","package_name":"@tanstack/start-storage-context","requirements":"1.163.3","kind":"runtime","optional":false},{"id":1936853925,"ecosystem":"npm","package_name":"@standard-schema/spec","requirements":"^1.0.0","kind":"Development","optional":false},{"id":1936853926,"ecosystem":"npm","package_name":"cookie-es","requirements":"^2.0.0","kind":"Development","optional":false},{"id":1936853927,"ecosystem":"npm","package_name":"fetchdts","requirements":"^0.1.6","kind":"Development","optional":false},{"id":1936853928,"ecosystem":"npm","package_name":"vite","requirements":"*","kind":"Development","optional":false}],"advisories":[{"uuid":"GSA_kwCzR0hTQS1xeDY2LWZ2MzQtZmptOM4AB9Xq","identifiers":["GHSA-qx66-fv34-fjm8","CVE-2026-102989"],"url":"https://github.com/advisories/GHSA-qx66-fv34-fjm8","title":"TanStack Router: Unauthenticated reflected XSS in TanStack Start server-function responses","severity":"CRITICAL","affected":true,"fixed":false,"fixed_versions":["1.169.39"]},{"uuid":"GSA_kwCzR0hTQS05bTY1LTc2NmMtcjMzM84ABW4D","identifiers":["GHSA-9m65-766c-r333"],"url":"https://github.com/advisories/GHSA-9m65-766c-r333","title":"TanStack Start - Server Core: Inbound server-function request deserialization could invoke a sibling client-referenced server function","severity":"MODERATE","affected":true,"fixed":false,"fixed_versions":["1.167.30"]}],"package_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/@tanstack%2Fstart-server-core"}