[rush] Fork npm-check into rush-lib (#5416)

* Fork npm-check

* rush update

* Update test scripts in package json

* rush update

* Fix test file

* Add and update readmes

* Update readme, update config

* Update readme

---------

Co-authored-by: cmalonzo <cmalonzo@users.noreply.github.com>

Author: cmalonzo

README.md

@@ -87,6 +87,7 @@ These GitHub repositories provide supplementary resources for Rush Stack:
 | [/libraries/lookup-by-path](./libraries/lookup-by-path/) | [![npm version](https://badge.fury.io/js/%40rushstack%2Flookup-by-path.svg)](https://badge.fury.io/js/%40rushstack%2Flookup-by-path) | [changelog](./libraries/lookup-by-path/CHANGELOG.md) | [@rushstack/lookup-by-path](https://www.npmjs.com/package/@rushstack/lookup-by-path) |
 | [/libraries/module-minifier](./libraries/module-minifier/) | [![npm version](https://badge.fury.io/js/%40rushstack%2Fmodule-minifier.svg)](https://badge.fury.io/js/%40rushstack%2Fmodule-minifier) | [changelog](./libraries/module-minifier/CHANGELOG.md) | [@rushstack/module-minifier](https://www.npmjs.com/package/@rushstack/module-minifier) |
 | [/libraries/node-core-library](./libraries/node-core-library/) | [![npm version](https://badge.fury.io/js/%40rushstack%2Fnode-core-library.svg)](https://badge.fury.io/js/%40rushstack%2Fnode-core-library) | [changelog](./libraries/node-core-library/CHANGELOG.md) | [@rushstack/node-core-library](https://www.npmjs.com/package/@rushstack/node-core-library) |
+| [/libraries/npm-check-fork](./libraries/npm-check-fork/) | [![npm version](https://badge.fury.io/js/%40rushstack%2Fnpm-check-fork.svg)](https://badge.fury.io/js/%40rushstack%2Fnpm-check-fork) | [changelog](./libraries/npm-check-fork/CHANGELOG.md) | [@rushstack/npm-check-fork](https://www.npmjs.com/package/@rushstack/npm-check-fork) |
 | [/libraries/operation-graph](./libraries/operation-graph/) | [![npm version](https://badge.fury.io/js/%40rushstack%2Foperation-graph.svg)](https://badge.fury.io/js/%40rushstack%2Foperation-graph) | [changelog](./libraries/operation-graph/CHANGELOG.md) | [@rushstack/operation-graph](https://www.npmjs.com/package/@rushstack/operation-graph) |
 | [/libraries/package-deps-hash](./libraries/package-deps-hash/) | [![npm version](https://badge.fury.io/js/%40rushstack%2Fpackage-deps-hash.svg)](https://badge.fury.io/js/%40rushstack%2Fpackage-deps-hash) | [changelog](./libraries/package-deps-hash/CHANGELOG.md) | [@rushstack/package-deps-hash](https://www.npmjs.com/package/@rushstack/package-deps-hash) |
 | [/libraries/package-extractor](./libraries/package-extractor/) | [![npm version](https://badge.fury.io/js/%40rushstack%2Fpackage-extractor.svg)](https://badge.fury.io/js/%40rushstack%2Fpackage-extractor) | [changelog](./libraries/package-extractor/CHANGELOG.md) | [@rushstack/package-extractor](https://www.npmjs.com/package/@rushstack/package-extractor) |

common/changes/@microsoft/rush/user-cmalonzo-npmaudit-fork-npm-check_2025-10-17-18-56.json

@@ -0,0 +1,10 @@
+{
+  "changes": [
+    {
+      "packageName": "@microsoft/rush",
+      "comment": "Fork npm-check to address npm audit CVE",
+      "type": "none"
+    }
+  ],
+  "packageName": "@microsoft/rush"
+}

common/changes/@rushstack/npm-check-fork/user-cmalonzo-npmaudit-fork-npm-check_2025-10-17-23-03.json

@@ -0,0 +1,10 @@
+{
+  "changes": [
+    {
+      "packageName": "@rushstack/npm-check-fork",
+      "comment": "Initial fork of npm-check",
+      "type": "minor"
+    }
+  ],
+  "packageName": "@rushstack/npm-check-fork"
+}

common/config/rush/nonbrowser-approved-packages.json

@@ -270,6 +270,10 @@
       "name": "@rushstack/node-core-library",
       "allowedCategories": [ "libraries", "tests", "vscode-extensions" ]
     },
+    {
+      "name": "@rushstack/npm-check-fork",
+      "allowedCategories": [ "libraries" ]
+    },
     {
       "name": "@rushstack/operation-graph",
       "allowedCategories": [ "libraries" ]
@@ -658,6 +662,10 @@
       "name": "git-repo-info",
       "allowedCategories": [ "libraries" ]
     },
+    {
+      "name": "giturl",
+      "allowedCategories": [ "libraries" ]
+    },
     {
       "name": "glob",
       "allowedCategories": [ "libraries", "vscode-extensions" ]
@@ -874,6 +882,10 @@
       "name": "package-extractor-test-03",
       "allowedCategories": [ "tests" ]
     },
+    {
+      "name": "package-json",
+      "allowedCategories": [ "libraries" ]
+    },
     {
       "name": "pnpm-sync-lib",
       "allowedCategories": [ "libraries" ]
@@ -986,6 +998,10 @@
       "name": "terser-webpack-plugin",
       "allowedCategories": [ "libraries", "tests" ]
     },
+    {
+      "name": "throat",
+      "allowedCategories": [ "libraries" ]
+    },
     {
       "name": "timsort",
       "allowedCategories": [ "libraries" ]

common/config/subspaces/build-tests-subspace/pnpm-lock.yaml

@@ -1,6 +1,6 @@
 // DO NOT MODIFY THIS FILE MANUALLY BUT DO COMMIT IT. It is generated and used by Rush.
 {
-  "pnpmShrinkwrapHash": "26e6eb2ac184c892057b5d9687143b690e088b75",
+  "pnpmShrinkwrapHash": "1dc2b69423ca353582cec8716410a0b8a8210aff",
   "preferredVersionsHash": "550b4cee0bef4e97db6c6aad726df5149d20e7d9",
-  "packageJsonInjectedDependenciesHash": "3622326a8ef09c6dd0846faf66ef2e04eabd1154"
+  "packageJsonInjectedDependenciesHash": "7bf222162008849ca931709cbaa90632d56766da"
 }