@inquirer/password
Inquirer password prompt
51
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
sboudriasmischah
Keywords
answeranswersaskbaseclicommandcommand-lineconfirmenquirergenerategeneratorhyperinputinquireinquirerinterfaceitermjavascriptmenunodenodejspromptpromptlypromptsquestionreadlinescaffoldscaffolderscaffoldingstdinstdoutterminalttyuiyeomanyozsh
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | missing-githead | AI (provenance): Trusted long-standing maintainer (sboudrias) with 1280 approved packages; gitHead is actually present in package.json; likely a CI/CD environment change, not a supply chain concern. | ai | |
| source-diff | source-size-tripled | AI (source-diff): Size increase is due to the v2 rewrite adding dual ESM/CJS compiled output and inlining core logic previously delegated to @inquirer/input; no injected payload indicators. | ai | |
| publish-pattern | new-deps-added | AI (publish-pattern): ansi-escapes is a well-known, legitimate CLI utility package; its addition is consistent with a terminal password prompt's functionality and poses no security risk. | ai | |
| dependencies | unvetted-dep:ansi-escapes | AI (dependencies): ansi-escapes is a legitimate, well-known utility for CLI prompt libraries; appropriate dependency for this package. | ai | |
| dependencies | unvetted-dep:@inquirer/ansi | AI (dependencies): First-party dependency within the @inquirer monorepo, published by the same author (sboudrias). | ai | |
| typosquat | typosquat.levenshtein:passport | AI (typosquat): @inquirer/password is part of the official Inquirer.js monorepo; scoped namespace and clear purpose rule out brand impersonation. | ai | |
| dependencies | unvetted-dep:@inquirer/type | AI (dependencies): First-party dependency within the @inquirer monorepo, published by the same author (sboudrias). | ai | |
| dependencies | unvetted-dep:@inquirer/core | AI (dependencies): First-party dependency within the @inquirer monorepo, published by the same author (sboudrias). | ai |
Versions (showing 51 of 98)
| Version | Deps | Published |
|---|---|---|
| 5.1.1 | 3 / 2 | |
| 5.1.0 | 3 / 2 | |
| 5.0.13 | 3 / 2 | |
| 5.0.12 | 3 / 2 | |
| 5.0.11 | 3 / 2 | |
| 5.0.10 | 3 / 2 | |
| 5.0.9 | 3 / 2 | |
| 5.0.8 | 3 / 3 | |
| 5.0.7 | 3 / 3 | |
| 5.0.6 | 3 / 3 | |
| 5.0.5 | 3 / 3 | |
| 5.0.4 | 3 / 3 | |
| 5.0.3 | 3 / 3 | |
| 5.0.2 | 3 / 3 | |
| 5.0.1 | 3 / 3 | |
| 5.0.0 | 3 / 3 | |
| 4.0.23 | 3 / 4 | |
| 4.0.22 | 3 / 4 | |
| 4.0.21 | 3 / 4 | |
| 4.0.20 | 3 / 4 | |
| 4.0.19 | 3 / 4 | |
| 4.0.18 | 3 / 4 | |
| 4.0.17 | 3 / 4 | |
| 4.0.16 | 3 / 4 | |
| 4.0.15 | 3 / 4 | |
| 4.0.14 | 3 / 4 | |
| 4.0.13 | 3 / 4 | |
| 4.0.12 | 3 / 4 | |
| 4.0.11 | 3 / 4 | |
| 4.0.10 | 3 / 4 | |
| 4.0.9 | 3 / 4 | |
| 4.0.8 | 3 / 4 | |
| 4.0.7 | 3 / 4 | |
| 4.0.6 | 3 / 4 | |
| 4.0.5 | 3 / 4 | |
| 4.0.4 | 3 / 4 | |
| 4.0.3 | 3 / 4 | |
| 4.0.2 | 3 / 4 | |
| 4.0.1 | 3 / 4 | |
| 4.0.0 | 3 / 4 | |
| 3.0.1 | 3 / 1 | |
| 3.0.0 | 3 / 1 | |
| 2.2.0 | 3 / 1 | |
| 2.1.22 | 3 / 1 | |
| 2.1.21 | 3 / 1 | |
| 2.1.20 | 3 / 1 | |
| 2.1.19 | 3 / 1 | |
| 2.1.18 | 3 / 1 | |
| 2.1.17 | 3 / 1 | |
| 2.1.16 | 3 / 1 | |
| 2.1.15 | 3 / 1 |