The log/tasks/spinners portion of Ionic CLI Framework
61%
Total Score
67
100
90
83
100
The package has had no release in more than two years, despite 17 releases overall; that long gap raises maintenance and abandonment concerns.
The repository recorded zero commits and zero active maintainers in the past three months. This conflicts somewhat with its recent push timestamp but still indicates weak observed development activity.
There were two new issues but no issues or pull requests closed in the past month, suggesting limited recent maintenance response.
The repository name does not match the package and its README does not mention the package. Although this can occur in a monorepo, the missing mention leaves package ownership less transparent.
All seven analyzed action references are unpinned, and two high-confidence template-injection findings appear in release-related workflows. No untrusted checkout or script-injection trigger was found, so these are workflow hygiene concerns rather than a severe standalone risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
debug Version ^4.0.0 | — | — |
tslib Version ^2.0.1 | — | — |
@ionic/utils-terminal Version 2.3.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.