Packages

@ngtools/webpack

22.2.5 · 28 Oct 2026MIT3.7M / weekRepositorynpmAtom feed

Deprecated by its maintainers: Angular's Webpack support is deprecated. Use the esbuild and Vite-based "@angular/build" package instead.What to use instead
Your version

1.5.3

24 Jul 2017Where it was published

1.10.2 is the newest release of 1.x.

In short

1 security1 fixed1 changed

  • security

    This release contains a single fix to a security vulnerability that was reported for Handlebars.

Release note

Notes

This release contains a single fix to a security vulnerability that was reported for Handlebars. Handlebars was not used during the build process and did not affect any of our users, but the vulnerability was still reported by Github who only check version numbers.

Since the faulty version of Handlebars might still be part of your package-lock.json (or yarn.lock) files, you might need to update those files before the alert disappears. You can do so by running npm update @angular/cli@1.5.3.

The package that the CLI depended on (postcss-url) has since removed their usage of Handlebars entirely.

Cheers,

  • The CLI team

Bug fixes

  • @angular/cli: update postcss loader and URL versions.