angular-expressions

Angular expressions as standalone module

Latest 1.7.1

NPM

84%

Total Score

healthy

Seven releases in the past year and a current, unarchived repository support a healthy release.

Are you affected? Scan for Free

Health Score Breakdown

Repo bus factor

One contributor made 100% of the seven recent commits. Organization ownership provides some handoff capacity, but no second active contributor is shown in this period.

Repo commit activity

Seven commits in the past three months show recent activity, although all were made by one active maintainer, leaving limited observed contributor breadth.

Repo tooling

Webpack and TypeScript build tooling are present, but no security scanning tools are reported, leaving a modest transparency gap.

Security policy

The repository has no security policy, which makes vulnerability reporting less clear for consumers and maintainers.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-10786 angular-expressions is vulnerable to Eval Injection in versions 0.0.1 - 1.5.1.	0.0.1 - 1.5.1	Critical
CVE-2024-54152 angular-expressions is vulnerable to Improper Control of Generation of Code ('Code Injection') in versions 0.0.0 - 1.4.3.	0.0.0 - 1.4.3	Critical
CVE-2021-21277 angular-expressions is vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in versions 0.0.0 - 1.1.2.	0.0.0 - 1.1.2	High
CVE-2020-5219 angular-expressions is vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in versions 0.0.0 - 1.0.1.	0.0.0 - 1.0.1	High