angular

npm

Is angular safe to use?

The latest brin safety scan flagged angular v1.8.3 with risk indicators that warrant review. 9 known CVE vulnerabilities. Trust score: 65/100. Review the findings below before use. This is an automated assessment and may contain errors.

Install (safety-checked)

angular Has Warnings

Warnings detected due to potential concerns

warning
CVEs

9

Threats

0

Install Scripts

0

Risk Indicators

  • GHSA-2qqx-w9hr-q5gx: UNKNOWN
  • GHSA-2vrf-hf26-jrp5: UNKNOWN
  • GHSA-4w4v-5hc9-xrr2: UNKNOWN
  • GHSA-j58c-ww9w-pwp5: UNKNOWN
  • GHSA-m2h2-264f-f486: UNKNOWN
  • GHSA-m9gf-397r-hwpg: UNKNOWN
  • GHSA-mqm9-c95h-x2p6: UNKNOWN
  • GHSA-prc3-vjfx-vhm9: UNKNOWN
  • GHSA-qwqh-hm9m-p5hr: UNKNOWN
  • Can spawn child processes

angular CVE Vulnerabilities (9)

GHSA-2qqx-w9hr-q5gxCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

angular vulnerable to regular expression denial of service via the $resource service

GHSA-2vrf-hf26-jrp5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

angular vulnerable to regular expression denial of service via the angular.copy() utility

GHSA-4w4v-5hc9-xrr2CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

angular vulnerable to super-linear runtime due to backtracking

brin Recommendations

  • This package has warnings detected. Evaluate the specific concerns before proceeding.

Install with brin add angular to automatically apply these checks before installation.

This is an automated, point-in-time assessment and may contain errors. Findings are risk indicators, not confirmed threats. Security posture may change over time. Maintainers can dispute findings via the brin review process.

angular Capabilities & Permissions

What angular can access when installed. Review these capabilities before using with AI agents like Cursor, Claude Code, or Codex.

Network Access

This package makes network requests.

angularjs.orgerrors.angularjs.org
Protocols: http

Process Spawning

This package can spawn child processes.

AGENTS.md for angular

Good instructions lead to good results. brin adds angular documentation to your AGENTS.md so your agent knows how to use it properly—improving both safety and performance.

brin init

Vercel's research: 100% accuracy with AGENTS.md vs 53% without →

angular Documentation & Source Code

For the full angular README, API documentation, and source code, visit the official package registry.

Frequently asked questions about angular safety

Weekly Downloads

457.7K

Version

1.8.3

License

MIT

Last Scanned

Feb 1, 2026

Trust Score

65/100·Legitimacy signals, not safety

CVEs (9)

GHSA-2qqx-w9hr-q5gx

angular vulnerable to regular expression denial of service via the $resource service

GHSA-2vrf-hf26-jrp5

angular vulnerable to regular expression denial of service via the angular.copy() utility

GHSA-4w4v-5hc9-xrr2

angular vulnerable to super-linear runtime due to backtracking

GHSA-j58c-ww9w-pwp5

AngularJS improperly sanitizes SVG elements

GHSA-m2h2-264f-f486

angular vulnerable to regular expression denial of service (ReDoS)

GHSA-m9gf-397r-hwpg

AngularJS allows attackers to bypass common image source restrictions

GHSA-mqm9-c95h-x2p6

AngularJS allows attackers to bypass common image source restrictions

GHSA-prc3-vjfx-vhm9

Angular (deprecated package) Cross-site Scripting

GHSA-qwqh-hm9m-p5hr

angular vulnerable to regular expression denial of service via the <input type="url"> element

Capabilities

Network

Connects to: angularjs.org, errors.angularjs.org

Process

Spawns child processes

Is angular Safe? | npm Safety Scan - brin