@microsoft/rush
A professional solution for consolidating all your JavaScript projects in one Git repo
91%
Total Score
healthy
Long-term active maintenance and strong project backing outweigh one high-confidence workflow template-injection finding.
Health Score Breakdown
No registry build attestation or trusted-publisher identity was observed. This limits publication transparency, but the package has strong maintenance and repository evidence that partly compensates for the provenance gap.
Both workflows were analyzed completely, use five pinned actions, and show no untrusted checkout or script-injection findings. However, the auditor found one high-confidence, high-severity template-injection issue in file-doc-tickets.yml, which is a real workflow hygiene and release-process concern.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 semver Version ~7.7.4 | — | — |
@microsoft/rush-lib Version 5.181.0 | — | — |
@rushstack/terminal Version 0.24.7 | — | — |
@rushstack/rush-reporter Version 0.4.1 | — | — |
@rushstack/node-core-library Version 5.25.1 | — | — |
Weekly Downloads
Info
- Last Published
- 6 days ago
- Created
- 9 years ago
- Unpacked Size
- 0.9 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.