Distillation

Date: Aug 7, 2026

• 🟡 (15:16) Tool output confirmed how path-to-regexp is used in @vercel/routing-utils superstatic.js (the only direct consumer, per earlier finding): line 49: pathToRegexp(path, keys, options); line 480: compile(value, { validate: false })(indexes); line 499: compile(\/${value}`, { validate: false })(indexes).slice(1). Both used APIs (pathToRegexp, compile`) are stable across path-to-regexp 6.x. Decision made: forcing path-to-regexp from 6.1.0 → 6.3.0 via a package.json override is safe; assistant stated it will add the override.