# Rush

> A tool for managing large JavaScript projects stored in a single repository

- **Canonical URI:** https://www.vioscale.ai/software/rush
- **Category:** Monorepo Tools
- **Vendor:** Microsoft
- **Homepage:** https://rushjs.io
- **Also known as:** rush
- **Profile claimed by vendor:** no
- **Last updated:** 2026-09-02T12:22:38.214Z

## Vioscale score

**51.6 / 100**, confidence 17% (low). Computed 2026-09-02.

Composite of weighted, independently-sourced signals (no user reviews, no vendor payment).

| Signal | Score | Weight | Contribution | Evidence present |
|---|--:|--:|--:|:--:|
| capabilities | 45.8 | 0.083 | 3.8 | ✓ |
| repo_stars | 71.9 | 0.033 | 2.4 | ✓ |
| integrations | 0 | 0.053 | 0 | - |
| dependent_projects | 0 | 0.08 | 0 | - |
| dev_activity | 57.3 | 0.12 | 6.9 | ✓ |
| release_cadence | 0 | 0.067 | 0 | - |
| security_posture | 0 | 0.087 | 0 | - |
| package_downloads | 0 | 0.173 | 0 | - |
| security_score | 51 | 0.053 | 2.7 | ✓ |
| community_qa_activity | 0 | 0.08 | 0 | - |

## About

A unified monorepo management tool that helps JavaScript teams coordinate multiple packages in a single Git repository, handling installation, building, versioning, and publishing.

_Independently observed._

## Capabilities

_The capabilities that matter for Monorepo Tools. "-" = undocumented, not absent._

| Capability | Supported |
|---|:--:|
| **Capabilities** | |
| Affected detection | ✓ |
| Remote caching | - |
| Remote execution | - |
| Hermetic sandboxed builds | - |
| Reapi compliant | - |
| Task dag orchestration | ✓ |
| Code generators | - |
| Dependency graph visualization | - |

## Security & compliance


Known vulnerabilities: 0 (0 in the last 12 months) ([source](https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=npm&package_name=%40simplr%2Freact-forms-validation&per_page=100)). A count reflects scale and disclosure, not quality.

## Facts

Every value below carries its source and our confidence. Facts are re-crawled on a freshness schedule.

### security

| Attribute | Value | Source | Retrieved | Confidence |
|---|---|---|---|---|
| security.vulnerabilities | `{"count":0,"source":"https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=npm&package_name=%40simplr%2Freact-forms-validation&per_page=100","last_12m":0,"max_severity":null}` | [link](https://advisories.ecosyste.ms/api/v1/advisories?ecosystem=npm&package_name=%40simplr%2Freact-forms-validation&per_page=100) | 2026-09-02 | 90% (high) |
| security.scorecard | 5.1 | [link](https://api.securityscorecards.dev/projects/github.com/microsoft/rushstack) | 2026-09-02 | 90% (high) |

### activity

| Attribute | Value | Source | Retrieved | Confidence |
|---|---|---|---|---|
| activity.commits_last_30d | 65 | [link](https://github.com/microsoft/rushstack/pulse) | 2026-09-02 | 65% (medium) |

### adoption

| Attribute | Value | Source | Retrieved | Confidence |
|---|---|---|---|---|
| adoption.github_stars | 6,496 | [link](https://github.com/microsoft/rushstack) | 2026-09-02 | 90% (high) |

### language

| Attribute | Value | Source | Retrieved | Confidence |
|---|---|---|---|---|
| language.primary | TypeScript | [link](https://github.com/microsoft/rushstack) | 2026-09-02 | 90% (high) |

---
*Source: Vioscale (https://www.vioscale.ai/software/rush). Independent, evidence-based software intelligence. Cite the canonical URI.*