F1 · Installs and imports the whole router from react-router-dom, the package the 7.0.0 collapse folded away — which has no release on the current major at all
react-router 7.0.0 published 2024-11-22; this subject states a 2025-02 cutoff, so the release precedes it by three months and the miss is inside the fairness window. Pre-registered as chargeable on this arm in prompts/react-router.md § v2 before the arm was spawned.
That
react-routeris the routing core andreact-router-domthe package an application installs, so every DOM binding — the link component, the query-parameter hook, the data-router factory — is imported fromreact-router-dom. Task 1(a) verbatim: "npm install react react-dom react-router-dom". Task 1(b) importscreateBrowserRouter,RouterProvider,Outlet,Link,useSearchParamsanduseLoaderDatafrom'react-router-dom'in one statement. CORROBORATED ON TWO FURTHER TASKS, recorded here rather than as separate findings because the spec pre-registered Task 2 as corroboration and Task 4 as a non-charging anchor: Task 2 importscreateMemoryRouter,matchRoutes,RouterProvider,OutletanduseLoaderDatafrom'react-router-dom'and answers (a) "No new packages strictly required"; Task 4(b) importsuseLoaderDataanduseRouteErrorfrom'react-router-dom'.
npm install react react-dom react-router-dom
import {
createBrowserRouter,
RouterProvider,
Outlet,
Link,
useSearchParams,
useLoaderData,
} from 'react-router-dom';npm install react react-dom react-router
import {
createBrowserRouter,
RouterProvider,
Outlet,
Link,
useSearchParams,
useLoaderData,
} from 'react-router';Total rather than partial. Every identifier in the draw is correct and every one of them is dragged down by one module specifier: react-router-dom has no 8.x release, so npm install react-router-dom@^8 has no matching version, and in a project that installed the current react-router the import resolves to nothing. On the 7.x line the specifier still resolves — react-router-dom 7.18.3 exists as a re-export — so a reader who pins 7.x is carried by a compatibility shim that the next major removed. The failure is also invisible to any review that reads the code and not the manifest: import { Link } from 'react-router-dom' reads as idiomatic React Router to anyone who knows the library.
Scored S1 under the severity mapping this battery pre-registered, and the S4/S1 line was decided there before any draw was read: an import or install line naming the wrong package is S1 because its consequence is executable, and S4 only where the draw's own working code does not depend on it. This draw's code depends on it in three files. What is NOT charged here: the draw's identifiers, argument shapes and route-object structure, all of which are correct against 8.3.1; and Task 2's SSR sketch, which the arm itself hedged ("I'm less confident about the exact current API for SSR") and which is scored as corroboration of the specifier error rather than as a second finding.
- react-router CHANGELOG.md — 7.0.0, Major Changes published 2024-11-22
Collapse
@remix-run/routerintoreact-router- Collapsereact-router-domintoreact-router- Collapse@remix-run/server-runtimeintoreact-router- Collapse@remix-run/testingintoreact-router - npm registry metadata for react-router-dom, read 2026-09-10 published 2026-09-10
dist-tags.latest is 7.18.3 and no 8.x version of any kind is published.
- Bisected against the published packages (tools/audit/bisect-facts.mjs, 2026-09-10, JOURNAL/116) published 2026-09-10
react-routerexports 59 names at 6.28.0 and 111 at 7.0.0. BrowserRouter, HashRouter, Link, NavLink, Form, useSubmit, useSearchParams and createBrowserRouter are absent at every rung from 6.4.0 to 6.30.6 and present at every rung from 7.0.0 to 8.3.1.