@rushstack/rush-sdk
An API for interacting with the Rush engine
91%
Total Score
healthy
Frequent releases, active Microsoft-backed maintenance, and broad contributors outweigh a minor workflow template-injection concern.
Health Score Breakdown
Both workflows were fully analyzed, use no unpinned actions, and expose no untrusted checkout or script-injection paths. The high-confidence template-injection finding in file-doc-tickets.yml is a workflow hygiene concern, but without a corroborating dangerous trigger it is not severe on its own.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 tapable Version 2.2.1 | — | — |
@rushstack/terminal Version 0.24.7 | — | — |
@pnpm/lockfile.types-900 Version npm:@pnpm/lockfile.types@~900.0.0 | — | — |
@rushstack/rush-reporter Version 0.4.1 | — | — |
@rushstack/lookup-by-path Version 0.10.19 | — | — |
Weekly Downloads
Info
- Last Published
- 6 days ago
- Created
- 4 years ago
- Unpacked Size
- 1.3 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.