@angular/cli
Advanced tools
@angular/cli - npm Package Compare versions
+6
-6
| { | ||
| "name": "@angular/cli", | ||
| "version": "7.3.6", | ||
| "version": "7.3.7", | ||
| "description": "CLI tool for Angular", | ||
@@ -29,7 +29,7 @@ "main": "lib/cli/index.js", | ||
| "dependencies": { | ||
| "@angular-devkit/architect": "0.13.6", | ||
| "@angular-devkit/core": "7.3.6", | ||
| "@angular-devkit/schematics": "7.3.6", | ||
| "@schematics/angular": "7.3.6", | ||
| "@schematics/update": "0.13.6", | ||
| "@angular-devkit/architect": "0.13.7", | ||
| "@angular-devkit/core": "7.3.7", | ||
| "@angular-devkit/schematics": "7.3.7", | ||
| "@schematics/angular": "7.3.7", | ||
| "@schematics/update": "0.13.7", | ||
| "@yarnpkg/lockfile": "1.1.0", | ||
@@ -36,0 +36,0 @@ "ini": "1.3.5", |
New alerts
Network access
Supply chain riskThis module accesses the network.
Found 1 instance in 1 package
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Found 1 instance in 1 package
Debug access
Supply chain riskUses debug, reflection and dynamic code execution features.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 3 instances in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
Fixed alerts
Network access
Supply chain riskThis module accesses the network.
Found 1 instance in 1 package
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Found 1 instance in 1 package
Debug access
Supply chain riskUses debug, reflection and dynamic code execution features.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 3 instances in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
Dependency changes
+ Added
@angular-devkit/architect@0.13.7(transitive)+ Added
@angular-devkit/core@7.3.7(transitive)+ Added
@angular-devkit/schematics@7.3.7(transitive)+ Added
@schematics/angular@7.3.7(transitive)+ Added
@schematics/update@0.13.7(transitive)- Removed
@angular-devkit/architect@0.13.6(transitive)- Removed
@angular-devkit/core@7.3.6(transitive)- Removed
@angular-devkit/schematics@7.3.6(transitive)- Removed
@schematics/angular@7.3.6(transitive)- Removed
@schematics/update@0.13.6(transitive)Updated
@angular-devkit/core@7.3.7Updated
@schematics/angular@7.3.7Updated
@schematics/update@0.13.7