@angular-devkit/build-angular
Angular Webpack Build Facade
42%
Total Score
unhealthy
Deprecated Webpack support makes this release a poor choice despite strong ongoing project maintenance.
Health Score Breakdown
The package is deprecated at package scope because Angular's Webpack support is deprecated, with esbuild and Vite-based @angular/build recommended instead. This materially limits its suitability for new dependencies.
The package declares 53 runtime dependencies, reflecting substantial build-system complexity. This adds maintenance surface, but the package's role as a comprehensive Angular build tool makes the breadth expected.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-602771 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @angular-devkit/build-angular is vulnerable to OS Command Injection in versions 17.0.0 - 22.0.4. | 17.0.0 - 22.0.4 | Medium |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ora Version 9.4.1 | — | — |
less Version 4.9.1 | — | — |
open Version 11.0.4 | — | — |
rxjs Version 7.8.2 | — | — |
tslib Version 2.8.1 | — | — |
Weekly Downloads
Info
- Last Published
- 5 days ago
- Created
- 8 years ago
- Unpacked Size
- 1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.