@angular/compiler-cli
Angular - the compiler CLI for Node.js
94%
Total Score
healthy
Frequent releases, current release notes, and active work from dozens of contributors support a healthy release.
Health Score Breakdown
No build attestation or trusted-publisher provenance was recorded, leaving publication origin less independently verifiable despite the package's strong maintenance evidence.
The linked repository name does not match the package name and its README does not mention this package, creating a provenance-transparency gap. The Angular organization backing and monorepo context partly compensate, so this is caution rather than danger.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-10947 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @angular/compiler-cli is vulnerable to Cross-site Scripting (XSS) in versions 21.0.0 - 21.2.12, 20.0.0 - 20.3.19 and 19.0.0 - 19.2.21. | 19.0.0 - 19.2.2120.0.0 - 20.3.1921.0.0 - 21.2.12 | Medium |
AIKIDO-2026-10828 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @angular/compiler-cli is vulnerable to Cross-site Scripting (XSS) in versions 21.0.0 - 21.2.12. | 21.0.0 - 21.2.12 | Medium |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 tslib Version ^2.3.0 | — | — |
yargs Version ^18.0.0 | — | — |
semver Version ^7.0.0 | — | — |
chokidar Version ^5.0.0 | — | — |
@babel/core Version 8.0.1 | — | — |
Weekly Downloads
Info
- Last Published
- 5 days ago
- Created
- 10 years ago
- Unpacked Size
- 2.7 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.