@microsoft/api-extractor-model
A helper library for loading and saving the .api.json files created by API Extractor
51
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.
Maintainers
microsoft1esmicrosoft-oss-releasesodspnpm
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| publish-pattern | new-deps-added | AI (publish-pattern): @rushstack/node-core-library is a first-party Microsoft/Rushstack package from the same org as this package; adding it as a dependency is expected and low-risk for this ecosystem. | ai | |
| source-diff | large-new-source-files | AI (source-diff): Package legitimately ships dual CJS/ESM build outputs; large file counts are expected for this Microsoft RushStack library across version updates. | ai | |
| npm-metadata | suspicious-initial-version | AI (npm-metadata): 0.0.0 is a known placeholder pattern in the Microsoft Rush/API Extractor ecosystem; this package has 221 versions and 7+ years of history under the trusted microsoft publisher. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Stub/placeholder version intentionally has no deps, no description, and tiny payload. This is consistent with Microsoft's versioning practices for this long-established package. | ai | |
| npm-metadata | no-description | AI (npm-metadata): Placeholder 0.0.0 version intentionally omits description; not indicative of malicious intent given the trusted publisher and package history. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): microsoft-oss-releases is Microsoft's standard OSS release automation account used across rushstack packages; this addition is a routine organizational change, not a suspicious takeover. | ai | |
| provenance | no-provenance | AI (provenance): Long-established Microsoft package published from the official rushstack monorepo; lack of Sigstore provenance is not a meaningful risk signal for this package. | ai | |
| dependencies | unvetted-dep:@microsoft/tsdoc-config | AI (dependencies): First-party Microsoft/RushStack package from the same monorepo ecosystem; unvetted status is a registry artifact, not a security concern. | ai | |
| dependencies | unvetted-dep:@microsoft/tsdoc | AI (dependencies): First-party Microsoft/RushStack package from the same monorepo ecosystem; unvetted status is a registry artifact, not a security concern. | ai | |
| dependencies | unvetted-dep:@rushstack/node-core-library | AI (dependencies): First-party RushStack package from the same monorepo ecosystem; unvetted status is a registry artifact, not a security concern. | ai |
Versions (showing 51 of 212)
| Version | Deps | Published |
|---|---|---|
| 7.33.8 | 3 / 3 | |
| 7.33.7 | 3 / 3 | |
| 7.33.6 | 3 / 3 | |
| 7.33.5 | 3 / 3 | |
| 7.33.4 | 3 / 3 | |
| 7.33.3 | 3 / 3 | |
| 7.33.2 | 3 / 3 | |
| 7.33.1 | 3 / 3 | |
| 7.33.0 | 3 / 3 | |
| 7.32.2 | 3 / 3 | |
| 7.32.1 | 3 / 3 | |
| 7.32.0 | 3 / 3 | |
| 7.31.3 | 3 / 3 | |
| 7.31.2 | 3 / 3 | |
| 7.31.1 | 3 / 3 | |
| 7.31.0 | 3 / 3 | |
| 7.30.9 | 3 / 3 | |
| 7.30.8 | 3 / 3 | |
| 7.30.7 | 3 / 3 | |
| 7.30.6 | 3 / 3 | |
| 7.30.5 | 3 / 5 | |
| 7.30.4 | 3 / 5 | |
| 7.30.3 | 3 / 5 | |
| 7.30.2 | 3 / 5 | |
| 7.30.1 | 3 / 5 | |
| 7.30.0 | 3 / 5 | |
| 7.29.9 | 3 / 5 | |
| 7.29.8 | 3 / 5 | |
| 7.29.7 | 3 / 5 | |
| 7.29.6 | 3 / 5 | |
| 7.29.5 | 3 / 5 | |
| 7.29.4 | 3 / 5 | |
| 7.29.3 | 3 / 5 | |
| 7.29.2 | 3 / 5 | |
| 7.29.1 | 3 / 5 | |
| 7.29.0 | 3 / 5 | |
| 7.28.21 | 3 / 5 | |
| 7.28.20 | 3 / 5 | |
| 7.28.19 | 3 / 5 | |
| 7.28.18 | 3 / 5 | |
| 7.28.17 | 3 / 5 | |
| 7.28.16 | 3 / 5 | |
| 7.28.15 | 3 / 5 | |
| 7.28.14 | 3 / 5 | |
| 7.28.13 | 3 / 5 | |
| 7.28.12 | 3 / 5 | |
| 7.28.11 | 3 / 5 | |
| 7.28.10 | 3 / 5 | |
| 7.28.9 | 3 / 5 | |
| 7.28.8 | 3 / 5 | |
| 7.28.7 | 3 / 5 |