@ionic/utils-stream

Release historycaution

The package has 24 releases since February 2019, but its latest release was in December 2023 and there were no releases in the last 12 months. This materially increases staleness risk despite its historically regular cadence.

Repo commit activitycaution

The linked repository recorded no commits and no active maintainers in the last three months. That weakens evidence of ongoing maintenance, although the repository is not archived.

Repo package mentioncaution

The repository name does not match the package, and its README does not mention @ionic/utils-stream. A monorepo mismatch can be normal, but the absence of a package mention leaves ownership less transparent.

Workflow auditcaution

All 7 analyzed action references are unpinned, and two high-confidence template-injection findings were reported in release-related workflows. The audit found no untrusted checkout or script-injection path, which limits the concern to workflow hygiene rather than a severe standalone risk.