@angular/localize 22.1.6 appears to be a healthy, mature dependency backed by the Angular organization. It has a long release history with 808 releases and 155 releases in the last 12 months, is not deprecated, is a stable major release, includes MIT licensing and TypeScript declarations, and has no install-time lifecycle scripts. The linked repository is active, unarchived, extensively maintained, and has broad contributor participation, tests, changelog support, releases, and a security policy. The main residual concerns are the absence of build provenance attestations, the repository/package mention check not identifying this package explicitly, and some GitHub workflows with write permissions or pull-request-triggered execution; these are transparency and workflow-hygiene cautions rather than evidence of abandonment.
91%
Total Score
100
100
90
80
50
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
yargs Version ^18.0.0 | — | — |
tinyglobby Version ^0.2.12 | — | — |
@babel/core Version 8.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.