ng-packagr
Compile and package Angular libraries in Angular Package Format (APF)
88%
Total Score
healthy
Healthy: frequent releases, active maintenance, and verified publishing outweigh limited security-policy and workflow-hygiene gaps.
Health Score Breakdown
The release declares 19 runtime dependencies, which is a meaningful dependency surface for a build tool but not inherently excessive for its documented functionality. No compensating dependency-risk signal was provided.
The project uses established build and test tooling, but no security-scanning tools were detected. That is a modest transparency and hygiene gap, not evidence of abandonment.
No repository security policy was found. This limits published guidance for reporting vulnerabilities, but it does not by itself indicate unsafe code or poor maintenance.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2020-7735 ng-packagr is vulnerable to Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in versions 0.0.0 - 10.1.1. | 0.0.0 - 10.1.1 | Medium |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ajv Version ^8.17.1 | — | — |
ora Version ^9.0.0 | — | — |
less Version ^4.2.0 | — | — |
rxjs Version ^7.8.1 | — | — |
sass Version ^1.103.1 | — | — |
Weekly Downloads
Info
- Last Published
- 11 days ago
- Created
- 9 years ago
- Unpacked Size
- 0.7 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.