Base types and functionality for Ignite UI CLI
84%
Total Score
healthy
Healthy: active maintenance and strong project backing outweigh workflow hygiene concerns.
All five workflows were analyzed, but 24 of 25 action references are unpinned and high-confidence template-injection findings appear in the documentation workflow; no untrusted checkout or injection trigger was reported, limiting this to a hygiene concern.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2025-10819 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @igniteui/cli-core is vulnerable to Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in versions 5.0.0 - 14.6.6. | 5.0.0 - 14.6.6 | High |
| Dependency | Last Release | Score |
|---|---|---|
glob Version ^11.0.0 | — | — |
chalk Version ^2.3.2 | — | — |
through2 Version ^2.0.3 | — | — |
typescript Version ~5.5.4 | — | — |
jsonc-parser Version 3.3.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.