@angular/cli
Advanced tools
@angular/cli - npm Package Compare versions
+6
-6
| { | ||
| "name": "@angular/cli", | ||
| "version": "6.2.0-rc.1", | ||
| "version": "6.2.0", | ||
| "description": "CLI tool for Angular", | ||
@@ -33,7 +33,7 @@ "main": "lib/cli/index.js", | ||
| "dependencies": { | ||
| "@angular-devkit/architect": "0.8.0-rc.1", | ||
| "@angular-devkit/core": "0.8.0-rc.1", | ||
| "@angular-devkit/schematics": "0.8.0-rc.1", | ||
| "@schematics/angular": "0.8.0-rc.1", | ||
| "@schematics/update": "0.8.0-rc.1", | ||
| "@angular-devkit/architect": "0.8.0", | ||
| "@angular-devkit/core": "0.8.0", | ||
| "@angular-devkit/schematics": "0.8.0", | ||
| "@schematics/angular": "0.8.0", | ||
| "@schematics/update": "0.8.0", | ||
| "json-schema-traverse": "^0.4.1", | ||
@@ -40,0 +40,0 @@ "opn": "^5.3.0", |
New alerts
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Found 1 instance in 1 package
Debug access
Supply chain riskUses debug, reflection and dynamic code execution features.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 1 instance in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
Fixed alerts
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Found 1 instance in 1 package
Debug access
Supply chain riskUses debug, reflection and dynamic code execution features.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 1 instance in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
No v1
QualityPackage is not semver >=1. This means it is not stable and does not support ^ ranges.
Found 1 instance in 1 package
Improved metrics
- Number of low quality alerts
0
-100%Worsened metrics
- Total package byte prevSize
515450
-0.01%Dependency changes
+ Added
@angular-devkit/architect@0.8.0(transitive)+ Added
@angular-devkit/core@0.8.0(transitive)+ Added
@angular-devkit/schematics@0.8.0(transitive)+ Added
@schematics/angular@0.8.0(transitive)+ Added
@schematics/update@0.8.0(transitive)- Removed
@angular-devkit/architect@0.8.0-rc.1(transitive)- Removed
@angular-devkit/core@0.8.0-rc.1(transitive)- Removed
@angular-devkit/schematics@0.8.0-rc.1(transitive)- Removed
@schematics/angular@0.8.0-rc.1(transitive)- Removed
@schematics/update@0.8.0-rc.1(transitive)Updated
@angular-devkit/core@0.8.0Updated
@schematics/angular@0.8.0Updated
@schematics/update@0.8.0