Installations
npm install @angular-architects/build-angularDeveloper Guide
Typescript
No
Module System
CommonJS
Min. Node Version
^16.14.0 || >=18.10.0
Node Version
18.17.0
NPM Version
9.6.7
Score
27.5
Supply Chain
51.2
Quality
71.4
Maintenance
50
Vulnerability
76.2
License
Releases
Contributors
Languages
TypeScript (94.65%)
Starlark (2.41%)
HTML (1.54%)
JavaScript (1.05%)
EJS (0.25%)
Shell (0.06%)
jq (0.03%)
CSS (0.01%)
Developer
Download Statistics
Total Downloads
1,904
Last Day
2
Last Week
2
Last Month
17
Last Year
434
GitHub Statistics
26,803 Stars
16,135 Commits
11,985 Forks
997 Watching
29 Branches
661 Contributors
Maintainers
Package Meta Information
Latest Version
16.2.0-next.2
Package Id
@angular-architects/build-angular@16.2.0-next.2
Unpacked Size
2.73 MB
Size
782.73 kB
File Count
371
NPM Version
9.6.7
Node Version
18.17.0
Publised On
19 Jul 2023
Total Downloads
Cumulative downloads
Total Downloads
1,904
Last day
100%
2
Compared to previous day
Last week
-66.7%
2
Compared to previous week
Last month
41.7%
17
Compared to previous month
Last year
-60.8%
434
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
66
Peer Dependencies
13
Optional Dependencies
1
@angular-devkit/build-angular
This package contains Architect builders used to build and test Angular applications and libraries.
Builders
| Name | Description |
|---|---|
| app-shell | Build an Angular App shell. |
| browser | Build an Angular application targeting a browser environment. |
| dev-server | A development server that provides live reloading. |
| extract-i18n | Extract i18n messages from an Angular application. |
| karma | Execute unit tests using Karma test runner. |
| ng-packagr | Build and package an Angular library in Angular Package Format (APF) format using ng-packagr. |
| server | Build an Angular application targeting a Node.js environment. |
| protractor | Deprecated - Run end-to-end tests using Protractor framework. |
Disclaimer
While the builders when executed via the Angular CLI and their associated options are considered stable, the programmatic APIs are not considered officially supported and are not subject to the breaking change guarantees of SemVer.
No vulnerabilities found.
Reason
no binaries found in the repo
Reason
22 out of 22 merged PRs checked by a CI test -- score normalized to 10
Reason
project has 64 contributing companies or organizations
Details
- Info: monsoonco contributor org/company found, ReactWeek contributor org/company found, hizenapp contributor org/company found, async-framework contributor org/company found, rangle contributor org/company found, newlinedotco contributor org/company found, aspect-build contributor org/company found, HTTPArchive contributor org/company found, FieldDB contributor org/company found, kunai-consulting contributor org/company found, ng-cruise contributor org/company found, uniform-team contributor org/company found, Ninja-Squad contributor org/company found, angular-redux contributor org/company found, SofiaJavaScript contributor org/company found, nko4 contributor org/company found, typings contributor org/company found, nguniversal contributor org/company found, https://1fpga.com contributor org/company found, vuejs contributor org/company found, TrilonIO contributor org/company found, expert support contributor org/company found, ngcommunity contributor org/company found, angular-community contributor org/company found, angular contributor org/company found, hackreactor contributor org/company found, FACTORYX contributor org/company found, AngularAir contributor org/company found, rectanglepodcast-com contributor org/company found, googlers contributor org/company found, mend contributor org/company found, webpack contributor org/company found, rangleio contributor org/company found, storybookjs contributor org/company found, trilonio co-founder contributor org/company found, google-gemini contributor org/company found, angular @google contributor org/company found, testiumjs contributor org/company found, RedditInsight contributor org/company found, beerjs contributor org/company found, guess-js contributor org/company found, gethuman contributor org/company found, keychain contributor org/company found, AngularClass contributor org/company found, QwikDev contributor org/company found, coddict contributor org/company found, Jasig contributor org/company found, qwikifiers contributor org/company found, nestjs contributor org/company found, app-demos contributor org/company found, obshtestvo contributor org/company found, nrwl contributor org/company found, angularjs-in-action contributor org/company found, ng-newsletter contributor org/company found, typed-typings contributor org/company found, wasmbinaries contributor org/company found, google contributor org/company found, ninja-squad contributor org/company found, deployd contributor org/company found, FEMR contributor org/company found, vue-software contributor org/company found, everything-registry contributor org/company found, ng-packagr contributor org/company found, source-map contributor org/company found,
Reason
no dangerous workflow patterns detected
Reason
update tool detected
Details
- Info: detected update tool: Dependabot: .github/dependabot.yml:1
- Info: detected update tool: RenovateBot: renovate.json:1
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: MIT License: LICENSE:0
Reason
30 commit(s) and 15 issue activity found in the last 90 days -- score normalized to 10
Reason
all dependencies are pinned
Details
- Info: 13 out of 13 GitHub-owned GitHubAction dependencies pinned
- Info: 51 out of 51 third-party GitHubAction dependencies pinned
Reason
security policy file detected
Details
- Info: security policy file detected: SECURITY.md:1
- Info: Found linked content: SECURITY.md:1
- Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1
- Info: Found text in security policy: SECURITY.md:1
Reason
GitHub workflow tokens follow principle of least privilege
Details
- Info: jobLevel 'packages' permission set to 'read': .github/workflows/codeql.yml:17
- Info: jobLevel 'actions' permission set to 'read': .github/workflows/scorecard.yml:19
- Info: jobLevel 'contents' permission set to 'read': .github/workflows/scorecard.yml:20
- Info: topLevel 'contents' permission set to 'read': .github/workflows/assistant-to-the-branch-manager.yml:10
- Info: found token with 'none' permissions: .github/workflows/ci.yml:1
- Info: found token with 'none' permissions: .github/workflows/codeql.yml:1
- Info: topLevel 'contents' permission set to 'read': .github/workflows/dev-infra.yml:9
- Info: topLevel 'contents' permission set to 'read': .github/workflows/feature-requests.yml:5
- Info: topLevel 'contents' permission set to 'read': .github/workflows/perf.yml:11
- Info: found token with 'none' permissions: .github/workflows/pr.yml:1
- Info: topLevel 'contents' permission set to 'read': .github/workflows/scorecard.yml:12
- Info: no jobLevel write permissions found
Reason
Found 21/22 approved changesets -- score normalized to 9
Reason
SAST tool detected but not run on all commits
Details
- Info: SAST configuration detected: CodeQL
- Warn: 0 commits out of 30 are checked with a SAST tool
Reason
branch protection is not maximal on development and all release branches
Details
- Info: 'allow deletion' disabled on branch 'main'
- Info: 'force pushes' disabled on branch 'main'
- Warn: required approving review count is 1 on branch 'main'
- Warn: codeowners review is not required on branch 'main'
- Warn: no status checks found to merge onto branch 'main'
- Info: PRs are required in order to make changes on branch 'main'
Reason
5 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
- Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q
- Warn: Project is vulnerable to: GHSA-776f-qx25-q3cc
Reason
badge detected: InProgress
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Score
8.3
/10
Last Scanned on 2025-02-02T02:27:56Z
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More