@angular-devkit/build-angular - npm Package Compare versions

Comparing version 21.2.0-rc.2 to 21.2.0

package.json

 {
   "name": "@angular-devkit/build-angular",
-  "version": "21.2.0-rc.2",
+  "version": "21.2.0",
   "description": "Angular Webpack Build Facade",
@@ -10,6 +10,6 @@ "main": "src/index.js",
     "@ampproject/remapping": "2.3.0",
-    "@angular-devkit/architect": "0.2102.0-rc.2",
-    "@angular-devkit/build-webpack": "0.2102.0-rc.2",
-    "@angular-devkit/core": "21.2.0-rc.2",
-    "@angular/build": "21.2.0-rc.2",
+    "@angular-devkit/architect": "0.2102.0",
+    "@angular-devkit/build-webpack": "0.2102.0",
+    "@angular-devkit/core": "21.2.0",
+    "@angular/build": "21.2.0",
     "@babel/core": "7.29.0",
@@ -25,3 +25,3 @@ "@babel/generator": "7.29.1",
     "@discoveryjs/json-ext": "0.6.3",
-    "@ngtools/webpack": "21.2.0-rc.2",
+    "@ngtools/webpack": "21.2.0",
     "ansi-colors": "4.1.3",
@@ -70,9 +70,9 @@ "autoprefixer": "10.4.24",
   "peerDependencies": {
-    "@angular/core": "^21.0.0 || ^21.2.0-next.0",
-    "@angular/compiler-cli": "^21.0.0 || ^21.2.0-next.0",
-    "@angular/localize": "^21.0.0 || ^21.2.0-next.0",
-    "@angular/platform-browser": "^21.0.0 || ^21.2.0-next.0",
-    "@angular/platform-server": "^21.0.0 || ^21.2.0-next.0",
-    "@angular/service-worker": "^21.0.0 || ^21.2.0-next.0",
-    "@angular/ssr": "^21.2.0-rc.2",
+    "@angular/core": "^21.0.0",
+    "@angular/compiler-cli": "^21.0.0",
+    "@angular/localize": "^21.0.0",
+    "@angular/platform-browser": "^21.0.0",
+    "@angular/platform-server": "^21.0.0",
+    "@angular/service-worker": "^21.0.0",
+    "@angular/ssr": "^21.2.0",
     "@web/test-runner": "^0.20.0",
@@ -83,3 +83,3 @@ "browser-sync": "^3.0.2",
     "karma": "^6.3.0",
-    "ng-packagr": "^21.0.0 || ^21.2.0-next.0",
+    "ng-packagr": "^21.0.0",
     "protractor": "^7.0.0",
@@ -86,0 +86,0 @@ "tailwindcss": "^2.0.0 || ^3.0.0 || ^4.0.0",

src/utils/normalize-cache.js

@@ -13,3 +13,3 @@ "use strict";
 /** Version placeholder is replaced during the build process with actual package version */
-const VERSION = '21.2.0-rc.2';
+const VERSION = '21.2.0';
 function hasCacheMetadata(value) {
@@ -16,0 +16,0 @@ return (!!value &&

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 2 instances in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 13 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 2 instances in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 13 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Number of low quality alerts

0

-100%

Worsened metrics

Total package byte prevSize

1009531

-0.02%

Dependency changes

• + Added

  @angular-devkit/architect@0.2102.0
  (transitive)

• + Added

  @angular-devkit/build-webpack@0.2102.0
  (transitive)

• + Added

  @angular-devkit/core@21.2.0
  (transitive)

• + Added

  @angular/build@21.2.0
  (transitive)

• + Added

  @jest/get-type@30.1.0
  (transitive)

• + Added

  @jest/test-sequencer@30.2.0
  (transitive)

• + Added

  @ngtools/webpack@21.2.0
  (transitive)

• + Added

  @sinclair/typebox@0.34.48
  (transitive)

• + Added

  @types/istanbul-lib-report@3.0.3
  (transitive)

• + Added

  @types/yargs-parser@21.0.3
  (transitive)

• + Added

  ajv@6.14.0
  (transitive)

• + Added

  aws-sign2@0.7.0
  (transitive)

• + Added

  aws4@1.13.2
  (transitive)

• + Added

  babel-jest@30.2.0
  (transitive)

• + Added

  caseless@0.12.0
  (transitive)

• + Added

  combined-stream@1.0.8
  (transitive)

• + Added

  cross-spawn@7.0.6
  (transitive)

• + Added

  execa@5.1.1
  (transitive)

• + Added

  forever-agent@0.6.1
  (transitive)

• + Added

  form-data@2.3.3
  (transitive)

• + Added

  har-validator@5.1.5
  (transitive)

• + Added

  http-signature@1.2.0
  (transitive)

• + Added

  is-path-cwd@1.0.0
  (transitive)

• + Added

  is-path-in-cwd@1.0.1
  (transitive)

• + Added

  is-typedarray@1.0.0
  (transitive)

• + Added

  isstream@0.1.2
  (transitive)

• + Added

  jest-circus@30.2.0
  (transitive)

• + Added

  jest-docblock@30.2.0
  (transitive)

• + Added

  json-schema-traverse@0.4.1
  (transitive)

• + Added

  json-stringify-safe@5.0.1
  (transitive)

• + Added

  lie@3.3.0
  (transitive)

• + Added

  oauth-sign@0.9.0
  (transitive)

• + Added

  p-limit@2.3.03.1.0
  (transitive)

• + Added

  pako@1.0.11
  (transitive)

• + Added

  path-key@3.1.1
  (transitive)

• + Added

  performance-now@2.1.0
  (transitive)

• + Added

  pinkie-promise@2.0.1
  (transitive)

• + Added

  resolve-from@4.0.05.0.0
  (transitive)

• + Added

  setimmediate@1.0.5
  (transitive)

• + Added

  shebang-command@2.0.0
  (transitive)

• + Added

  tunnel-agent@0.6.0
  (transitive)

• + Added

  uri-js@4.4.1
  (transitive)

• + Added

  which@2.0.2
  (transitive)

• + Added

  xmlbuilder@11.0.1
  (transitive)

• - Removed

  @angular-devkit/architect@0.2102.0-rc.2
  (transitive)

• - Removed

  @angular-devkit/build-webpack@0.2102.0-rc.2
  (transitive)

• - Removed

  @angular-devkit/core@21.2.0-rc.2
  (transitive)

• - Removed

  @angular/build@21.2.0-rc.2
  (transitive)

• - Removed

  @ngtools/webpack@21.2.0-rc.2
  (transitive)

• - Removed

  @sinonjs/fake-timers@13.0.5
  (transitive)

• - Removed

  @socket.io/component-emitter@3.1.2
  (transitive)

• - Removed

  @types/koa@2.15.0
  (transitive)

• - Removed

  @web/parse5-utils@2.1.1
  (transitive)

• - Removed

  ansi-regex@2.1.15.0.16.2.2
  (transitive)

• - Removed

  color-convert@2.0.1
  (transitive)

• - Removed

  engine.io-client@6.6.4
  (transitive)

• - Removed

  get-stream@6.0.1
  (transitive)

• - Removed

  has-flag@4.0.0
  (transitive)

• - Removed

  is-stream@2.0.1
  (transitive)

• - Removed

  koa@2.16.4
  (transitive)

• - Removed

  koa-etag@4.0.0
  (transitive)

• - Removed

  koa-send@5.0.1
  (transitive)

• - Removed

  koa-static@5.0.0
  (transitive)

• Updated

  @angular-devkit/architect@0.2102.0

• Updated

  @angular-devkit/build-webpack@0.2102.0

• Updated

  @angular-devkit/core@21.2.0

• Updated

  @angular/build@21.2.0

• Updated

  @ngtools/webpack@21.2.0