npm package report
Is @angular-devkit/build-angular safe?
Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.
npm packagelast checked 2026-09-19
@angular-devkit/build-angular · verdict ALLOW · no known risk
0.6/10
XYZ SCORE
Commit-Level AnalysisclearOK
14 unconfirmed pattern hit(s) in watched commit history; none verified as malicious.
@ampproject/remapping@2.3.0clean
@angular-devkit/architect@0.2102.6clean
@angular-devkit/core@21.2.6clean
ansi-colors@4.1.3clean
autoprefixer@10.4.27clean
@babel/core@7.29.0clean
@babel/generator@7.29.1clean
@babel/helper-annotate-as-pure@7.27.3clean
@babel/helper-split-export-declaration@7.24.7clean
babel-loader@10.0.0clean
@babel/plugin-transform-async-generator-functions@7.29.0clean
@babel/plugin-transform-async-to-generator@7.28.6clean
@babel/plugin-transform-runtime@7.29.0clean
@babel/preset-env@7.29.0clean
@babel/runtime@7.28.6clean
browserslist@^4.26.0clean
copy-webpack-plugin@14.0.0clean
css-loader@7.1.3clean
@discoveryjs/json-ext@0.6.3clean
esbuild@0.27.3clean
PACKAGE @angular-devkit/build-angularECOSYSTEM npmDECISION ALLOW
Package facts
Weekly downloads
16.3M
GitHub stars
0
Centrality tier
tier 2
Build provenance
unknown
Direct dependencies
40
History on this package: popular package (979 versions over 115d) with pattern-only evidence — de-escalated for review rather than blocked
Baked snapshot · run a live check for the current verdict · browse all packages