@rushstack/terminal
User interface primitives for console applications
100
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.
Maintainers
rushstack-adminodspnpmoctogonzmicrosoft1es
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| maintainer-change | maintainer-removed | AI (maintainer-change): Removal of microsoft1es is consistent with routine org-level maintainer roster management; publisher odspnpm is a long-standing trusted Microsoft-affiliated actor with no new unknown maintainers added. | ai | |
| phantom-deps | phantom-dep:@types/node | AI (phantom-deps): @types/node is a TypeScript type package legitimately listed as a dependency for compiler resolution in this ecosystem; not a security concern for this package. | ai | |
| source-diff | large-new-source-files | AI (source-diff): RushStack terminal ships dual CJS/ESM build outputs; large file counts are expected from the TypeScript build pipeline across 341 versions. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): @rushstack/problem-matcher is a first-party sibling package from the same Microsoft RushStack org/publisher; adding intra-ecosystem deps is expected and low-risk for this package. | ai | |
| bogus-package | bogus-package | AI (bogus-package): Sparse metadata is consistent with a Rush Stack monorepo placeholder stub; 341 versions and 2049-day age confirm legitimate, long-running package. | ai | |
| npm-metadata | no-description | AI (npm-metadata): Missing description is a known characteristic of Rush Stack placeholder/stub versions; not indicative of malicious intent given package age and version count. | ai | |
| npm-metadata | suspicious-initial-version | AI (npm-metadata): @rushstack packages use 0.0.0 as a standard monorepo placeholder version; this is a documented pattern across all 341 versions in this well-established ecosystem package. | ai | |
| dependencies | unvetted-dep:@rushstack/problem-matcher | AI (dependencies): @rushstack/problem-matcher is a sibling package in the same Microsoft RushStack monorepo, published by the same trusted publisher ecosystem. | ai | |
| maintainer-change | maintainer-added | AI (maintainer-change): microsoft1es is a Microsoft 1ES CI/CD publishing account; adding it is consistent with Microsoft's internal publishing practices for RushStack packages. | ai | |
| provenance | no-provenance | AI (provenance): Established Microsoft/RushStack package published by long-trusted odspnpm publisher; lack of Sigstore provenance is a known gap for this package family, not a risk indicator. | ai | |
| dependencies | unvetted-dep:@rushstack/node-core-library | AI (dependencies): Sibling package from the same Microsoft RushStack monorepo; trusted dependency with a long track record. | ai |
Versions (showing 100 of 341)
| Version | Deps | Published |
|---|---|---|
| 0.24.0 | 3 / 4 | |
| 0.23.0 | 3 / 4 | |
| 0.22.7 | 3 / 4 | |
| 0.22.6 | 3 / 4 | |
| 0.22.5 | 3 / 4 | |
| 0.22.4 | 3 / 4 | |
| 0.22.3 | 3 / 4 | |
| 0.22.2 | 3 / 4 | |
| 0.22.1 | 3 / 4 | |
| 0.22.0 | 3 / 4 | |
| 0.21.0 | 3 / 4 | |
| 0.19.5 | 3 / 4 | |
| 0.19.4 | 3 / 4 | |
| 0.19.3 | 3 / 4 | |
| 0.19.2 | 3 / 4 | |
| 0.19.1 | 3 / 4 | |
| 0.19.0 | 3 / 4 | |
| 0.18.0 | 3 / 4 | |
| 0.17.0 | 3 / 4 | |
| 0.16.0 | 2 / 4 | |
| 0.15.4 | 2 / 4 | |
| 0.15.3 | 2 / 4 | |
| 0.15.2 | 2 / 6 | |
| 0.15.1 | 2 / 6 | |
| 0.15.0 | 2 / 6 | |
| 0.14.6 | 2 / 6 | |
| 0.14.5 | 2 / 6 | |
| 0.14.4 | 2 / 6 | |
| 0.14.3 | 2 / 6 | |
| 0.14.2 | 2 / 6 | |
| 0.14.1 | 2 / 6 | |
| 0.14.0 | 2 / 6 | |
| 0.13.4 | 2 / 6 | |
| 0.13.3 | 2 / 6 | |
| 0.13.2 | 2 / 6 | |
| 0.13.1 | 2 / 6 | |
| 0.13.0 | 2 / 6 | |
| 0.12.3 | 2 / 6 | |
| 0.12.2 | 2 / 6 | |
| 0.12.1 | 2 / 6 | |
| 0.12.0 | 2 / 6 | |
| 0.11.1 | 2 / 6 | |
| 0.11.0 | 2 / 6 | |
| 0.10.4 | 2 / 6 | |
| 0.10.3 | 2 / 6 | |
| 0.10.2 | 2 / 6 | |
| 0.10.1 | 2 / 6 | |
| 0.10.0 | 2 / 6 | |
| 0.9.0 | 2 / 5 | |
| 0.8.1 | 2 / 5 | |
| 0.8.0 | 1 / 6 | |
| 0.7.24 | 1 / 3 | |
| 0.7.23 | 1 / 3 | |
| 0.7.22 | 1 / 3 | |
| 0.7.21 | 1 / 3 | |
| 0.7.20 | 1 / 3 | |
| 0.7.19 | 1 / 3 | |
| 0.7.18 | 1 / 3 | |
| 0.7.17 | 1 / 3 | |
| 0.7.16 | 1 / 3 | |
| 0.7.15 | 1 / 3 | |
| 0.7.14 | 1 / 3 | |
| 0.7.13 | 1 / 3 | |
| 0.7.12 | 1 / 3 | |
| 0.7.11 | 1 / 3 | |
| 0.7.10 | 1 / 3 | |
| 0.7.9 | 1 / 3 | |
| 0.7.8 | 1 / 3 | |
| 0.7.7 | 1 / 3 | |
| 0.7.6 | 1 / 3 | |
| 0.7.5 | 1 / 3 | |
| 0.7.4 | 1 / 3 | |
| 0.7.3 | 1 / 4 | |
| 0.7.2 | 1 / 4 | |
| 0.7.1 | 1 / 4 | |
| 0.7.0 | 1 / 6 | |
| 0.6.0 | 2 / 7 | |
| 0.5.38 | 2 / 7 | |
| 0.5.37 | 2 / 7 | |
| 0.5.36 | 2 / 7 | |
| 0.5.35 | 2 / 7 | |
| 0.5.34 | 2 / 7 | |
| 0.5.33 | 2 / 7 | |
| 0.5.32 | 2 / 7 | |
| 0.5.31 | 2 / 7 | |
| 0.5.30 | 2 / 7 | |
| 0.5.29 | 2 / 7 | |
| 0.5.28 | 2 / 7 | |
| 0.5.27 | 2 / 7 | |
| 0.5.26 | 2 / 7 | |
| 0.5.25 | 2 / 7 | |
| 0.5.24 | 2 / 7 | |
| 0.5.23 | 2 / 7 | |
| 0.5.22 | 2 / 7 | |
| 0.5.21 | 2 / 7 | |
| 0.5.20 | 2 / 7 | |
| 0.5.19 | 2 / 7 | |
| 0.5.18 | 2 / 7 | |
| 0.5.17 | 2 / 7 | |
| 0.5.16 | 2 / 7 |
Showing 100 of 341
Next page →