@angular-devkit/core - npm Package Compare versions

Comparing version 21.1.4 to 21.1.5

package.json

 {
   "name": "@angular-devkit/core",
-  "version": "21.1.4",
+  "version": "21.1.5",
   "description": "Angular DevKit - Core Utility Library",
@@ -33,3 +33,3 @@ "main": "src/index.js",
   "dependencies": {
-    "ajv": "8.17.1",
+    "ajv": "8.18.0",
     "ajv-formats": "3.0.1",
@@ -53,3 +53,3 @@ "jsonc-parser": "3.3.1",
   },
-  "packageManager": "pnpm@10.29.1",
+  "packageManager": "pnpm@10.29.3",
   "engines": {
@@ -56,0 +56,0 @@ "node": "^20.19.0 || ^22.12.0 || >=24.0.0",

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

No metric changes

Dependency changes

• + Added

  ajv@8.18.0
  (transitive)

• - Removed

  ajv@8.17.1
  (transitive)

• Updated

  ajv@8.18.0