ng-packagr

22.2.4 · 1 Oct 2026MIT774.3k / weekRepository npm Atom feed

Security advisories

From OSV, open ones first. Each release line gets its own fix: an older major is fixed by a patch on that major, not by moving to the newest one.

Paste your package.json, or type the range you declare for ng-packagr. It is read in your browser and sent nowhere.

Line	Newest	Where it stands
	22.2.4	No known advisory
	21.2.7	No known advisory
	20.3.2	No known advisory
	10.1.2	6 open advisories, worst moderate · last release Sep 2020, no longer updated

Your version

Moderate
OS Command Injection in ng-packagrGHSA-qm28-7hqv-wg5j · 7 May 2021
- 10.x10.0.0 – 10.1.0Fixed in 10.1.1
- 9.x and older1.0.0 – 9.1.5No fix, no longer updated · move to 10.1.1

What npm and deps.dev say about the latest release. Signals, not a verdict.

Reading npm and deps.dev…

Registry facts last checked 21 Oct 2026. Releases and advisories last read 21 Oct 2026.