Official build system for Angular
96%
Total Score
healthy
Frequent releases and active, well-backed development make this a mature release with only minor transparency gaps.
No build attestation or trusted-publisher identity was reported, leaving a supply-chain transparency gap, but the package has strong repository, release, and workflow evidence.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-10985 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @angular/build is vulnerable to Path Traversal in versions 18.0.0 - 21.2.12. | 18.0.0 - 21.2.12 | Medium |
| Dependency | Last Release | Score |
|---|---|---|
sass Version 1.104.1 | — | — |
vite Version 8.3.0 | — | — |
listr2 Version 11.1.0 | — | — |
mrmime Version 2.0.1 | — | — |
semver Version 7.8.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.