jest-preset-angular

Lifecycle scriptscaution

A prepare install-time script can execute package-controlled code during installation, adding supply-chain exposure, although this is not by itself evidence of unsafe behavior.

Security policycaution

The repository has no published security policy, leaving vulnerability-reporting expectations and response procedures less transparent.

Workflow auditcaution

All seven workflows were analyzed, all 18 action references are pinned, and no audit findings were reported. However, the release workflow combines a workflow_run trigger with one untrusted checkout, creating a caution for workflow supply-chain handling; top-level write permissions are also broader than ideal but not dangerous alone.