npm package report

Is @angular/cli safe?

Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.

cyberxyz.io/packages/npm/angular__cli

npm packagelast checked 2026-09-19

@angular/cli · verdict ALLOW · no known risk

0.6/10

XYZ SCORE

SUMMARY

Verdict ALLOW · 16 graph-tracked dependencies · provenance: unknown

SIGNALS

Commit-Level AnalysisclearOK

14 unconfirmed pattern hit(s) in watched commit history; none verified as malicious.

DEPENDENCIES

algoliasearch@5.48.1clean

@angular-devkit/architect@0.2102.6clean

@angular-devkit/core@21.2.6clean

@angular-devkit/schematics@21.2.6clean

ini@6.0.0clean

@inquirer/prompts@7.10.1clean

jsonc-parser@3.3.1clean

listr2@9.0.5clean

@listr2/prompt-adapter-inquirer@3.0.5clean

@modelcontextprotocol/sdk@1.26.0clean

npm-package-arg@13.0.2clean

pacote@21.3.1clean

semver@7.7.4clean

yargs@18.0.0clean

@yarnpkg/lockfile@1.1.0clean

zod@4.3.6clean

PACKAGE @angular/cliECOSYSTEM npmDECISION ALLOW

Weekly downloads

21M

GitHub stars

Centrality tier

tier 2

Build provenance

unknown

Direct dependencies

History on this package: popular package (1101 versions over 115d) with pattern-only evidence — de-escalated for review rather than blocked

Baked snapshot · run a live check for the current verdict · browse all packages