		{
		"name": "@angular-devkit/build-angular",
		"version": "20.3.9",
		"version": "20.3.10",
		"description": "Angular Webpack Build Facade",
		@@ -10,6 +10,6 @@ "main": "src/index.js",
		"@ampproject/remapping": "2.3.0",
		"@angular-devkit/architect": "0.2003.9",
		"@angular-devkit/build-webpack": "0.2003.9",
		"@angular-devkit/core": "20.3.9",
		"@angular/build": "20.3.9",
		"@angular-devkit/architect": "0.2003.10",
		"@angular-devkit/build-webpack": "0.2003.10",
		"@angular-devkit/core": "20.3.10",
		"@angular/build": "20.3.10",
		"@babel/core": "7.28.3",
		@@ -25,3 +25,3 @@ "@babel/generator": "7.28.3",
		"@discoveryjs/json-ext": "0.6.3",
		"@ngtools/webpack": "20.3.9",
		"@ngtools/webpack": "20.3.10",
		"ansi-colors": "4.1.3",
		@@ -76,3 +76,3 @@ "autoprefixer": "10.4.21",
		"@angular/service-worker": "^20.0.0",
		"@angular/ssr": "^20.3.9",
		"@angular/ssr": "^20.3.10",
		"@web/test-runner": "^0.20.0",
		@@ -79,0 +79,0 @@ "browser-sync": "^3.0.2",

+1

-1

src/utils/normalize-cache.js

		@@ -13,3 +13,3 @@ "use strict";
		/** Version placeholder is replaced during the build process with actual package version */
		const VERSION = '20.3.9';
		const VERSION = '20.3.10';
		function hasCacheMetadata(value) {
		@@ -16,0 +16,0 @@ return (!!value &&

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 2 instances in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 13 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 2 instances in 1 package

Uses eval

Supply chain risk

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 13 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

@angular-devkit/build-angular - npm Package Compare versions

New alerts

Fixed alerts

Improved metrics

Worsened metrics

Dependency changes