@rushstack/rush-sdk
Clear licensing, complete typings, and a substantial README make integration straightforward. The repository has security tooling and a policy; its isolated workflow finding merits routine review.
88%
Total Score
100
100
83
Health Score Breakdown
All 2 workflows were analyzed, all 5 action references are pinned, and no untrusted checkout or script-injection path was found. A high-confidence template-injection finding remains a workflow hygiene concern, though it is not paired with a dangerous trigger here.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 tapable Version 2.2.1 | — | — |
@rushstack/terminal Version 0.24.6 | — | — |
@pnpm/lockfile.types-900 Version npm:@pnpm/lockfile.types@~900.0.0 | — | — |
@rushstack/rush-reporter Version 0.4.0 | — | — |
@rushstack/lookup-by-path Version 0.10.18 | — | — |
Weekly Downloads
Info
- Last Published
- 6 days ago
- Created
- 4 years ago
- Unpacked Size
- 1.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.