@angular/compiler-cli
Angular - the compiler CLI for Node.js
96%
Total Score
healthy
Frequent releases, strong organization backing, and active contributors indicate a well-maintained release.
Health Score Breakdown
No build attestation or trusted-publisher provenance was detected, leaving publication origin less independently verifiable despite the package's strong release and repository activity.
The repository name does not match the package and its README does not mention the package, which leaves some uncertainty about the package-to-repository link. The Angular organization and monorepo context provide partial compensation, but the indicator still warrants caution.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-10947 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @angular/compiler-cli is vulnerable to Cross-site Scripting (XSS) in versions 21.0.0 - 21.2.12, 20.0.0 - 20.3.19 and 19.0.0 - 19.2.21. | 19.0.0 - 19.2.2120.0.0 - 20.3.1921.0.0 - 21.2.12 | Medium |
AIKIDO-2026-10828 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @angular/compiler-cli is vulnerable to Cross-site Scripting (XSS) in versions 21.0.0 - 21.2.12. | 21.0.0 - 21.2.12 | Medium |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 tslib Version ^2.3.0 | — | — |
yargs Version ^18.0.0 | — | — |
semver Version ^7.0.0 | — | — |
chokidar Version ^5.0.0 | — | — |
@babel/core Version 8.0.1 | — | — |
Weekly Downloads
Info
- Last Published
- 2 days ago
- Created
- 10 years ago
- Unpacked Size
- 2.7 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.