Bump the production-dependencies group across 1 directory with 12 updates #71

dependabot · 2024-11-26T20:21:59Z

Bumps the production-dependencies group with 12 updates in the /frontend directory:

Package	From	To
@angular/animations	`18.2.12`	`19.0.1`
@angular/cdk	`18.2.13`	`19.0.0`
@angular/common	`18.2.12`	`19.0.1`
@angular/compiler	`18.2.12`	`19.0.1`
@angular/core	`18.2.12`	`19.0.1`
@angular/forms	`18.2.12`	`19.0.1`
@angular/material	`18.2.13`	`19.0.0`
@angular/platform-browser	`18.2.12`	`19.0.1`
@angular/platform-browser-dynamic	`18.2.12`	`19.0.1`
@angular/router	`18.2.12`	`19.0.1`
@octokit/types	`13.6.1`	`13.6.2`
cronstrue	`2.51.0`	`2.52.0`

Updates @angular/animations from 18.2.12 to 19.0.1

Release notes

Sourced from @angular/animations's releases.

v19.0.1

19.0.1 (2024-11-26)

compiler-cli

Commit Description

more accurate diagnostics for host binding parser errors (#58870)

core

Commit Description

correctly clear template HMR internal renderer cache (#58724)

correctly perform lazy routes migration for components with additional decorators (#58796)

Ensure _tick is always run within the TracingSnapshot. (#58881)

Ensure resource sets an error (#58855)

make component id generation more stable between client and server builds (#58813)

Prevents race condition of cleanup for incremental hydration (#58722)

forms

Commit Description

work around TypeScript 5.7 issue (#58731)

language-service

Commit Description

add fix for individual unused imports (#58719)

allow fixes to run without template info (#58719)

migrations

Commit Description

fix provide-initializer migration when using useFactory (#58518)

handle parameters with initializers in inject migration (#58769)

Mark hoisted properties as removed in inject migration (#58804)

v19.0.0

19.0.0 (2024-11-19)

Explore Angular v19 with a blog post from the Angular team: https://blog.angular.dev/meet-angular-v19-7b29dfd05b84

Breaking Changes

compiler

this.foo property reads no longer refer to template context variables. If you intended to read the template variable, do not use this..

core

Angular directives, components and pipes are now standalone by default.

Specify standalone: false for declarations that are currently declared in @NgModules.

ng update for v19 will take care of this automatically.

TypeScript versions less than 5.5 are no longer supported.

Timing changes for effect API (in developer preview):

effects which are triggered outside of change detection run as part of the change detection process instead of as a microtask. Depending on the

... (truncated)

Changelog

Sourced from @angular/animations's changelog.

19.0.1 (2024-11-26)

compiler-cli

Commit Type Description

fb1fa8b0fc fix more accurate diagnostics for host binding parser errors (#58870)

core

Commit Type Description

502ee0e722 fix correctly clear template HMR internal renderer cache (#58724)

99715104a1 fix correctly perform lazy routes migration for components with additional decorators (#58796)

118803035f fix Ensure _tick is always run within the TracingSnapshot. (#58881)

08b9452f01 fix Ensure resource sets an error (#58855)

84f45ea3ff fix make component id generation more stable between client and server builds (#58813)

d3491c7cee fix Prevents race condition of cleanup for incremental hydration (#58722)

forms

Commit Type Description

4dfe5b6cef fix work around TypeScript 5.7 issue (#58731)

language-service

Commit Type Description

a983865bff fix add fix for individual unused imports (#58719)

e6e7a4e22b fix allow fixes to run without template info (#58719)

migrations

Commit Type Description

5ce10264a4 fix fix provide-initializer migration when using useFactory (#58518)

d4f5c85f60 fix handle parameters with initializers in inject migration (#58769)

a6d2d2dc10 fix Mark hoisted properties as removed in inject migration (#58804)

19.0.0 (2024-11-19)

Blog post: https://blog.angular.dev/meet-angular-v19-7b29dfd05b84

Breaking Changes

compiler

this.foo property reads no longer refer to template context variables. If you intended to read the template variable, do not use this..

core

Angular directives, components and pipes are now standalone by default.

Specify standalone: false for declarations that are currently declared in @NgModules.

ng update for v19 will take care of this automatically.

TypeScript versions less than 5.5 are no longer supported.

Timing changes for effect API (in developer preview):

effects which are triggered outside of change detection run as part of the change detection process instead of as a microtask. Depending on the specifics of application/test setup, this can result in them executing

... (truncated)

Commits

09df589 refactor(core): Migrate all packages with the explicit-standalone-flag sche...
84b6896 refactor(platform-server): Add an ssr benchmark setup. (#57647)
9dbe6fc refactor: update license text to point to angular.dev (#57901)
See full diff in compare view

Updates @angular/cdk from 18.2.13 to 19.0.0

Release notes

Sourced from @angular/cdk's releases.

v19.0.0

19.0.0 "hafnium-hippo" (2024-11-19)

cdk

Commit Description

a11y: use native media query for high contrast detection (#29678)

private: create cdk-visually-hidden style loader (#29757)

overlay: avoid having to manually load structural styles

overlay: load structural styles in a cascade layer (#29725)

portal: remove ComponentFactoryResolver usages (#27427)

scrolling: adds ngTemplateContextGuard (#27276)

text-field: avoid having to manually load text field styles

tree: fix issue where isExpanded wouldn't be set if placed before isExpandable (#29565)

tree: only handle keyboard events directly from the node (#29861)

tree: warn if mixed node types are used within the same tree

material

Commit Description

checkbox: add new aria properties to MatCheckbox (#29457)

core: add experimental theme demo (#29636)

core: add theme-overrides mixin (#29858)

core: create focus-indicator structural styles loader (#29763)

core: default to color-scheme theme type (#29907)

core: deprecate the core mixin (#29906)

core: rename theme mixin (#29857)

core: switch system prefix from sys to mat-sys (#29908)

input: add the ability to interact with disabled inputs (#29574)

schematics: create v19 core removal schematic (#29768)

schematics: Switch custom theme schematic to use theme mixin instead of define-theme and add high contrast override mixins (#29642)

schematics: Update custom theme schematic to work with light-dark and use theme-overrides mixin (#29911)

tabs: add alignTabs in MatTabsConfig (#29779)

theming: Disambiguate token names in theme overrides (#29859)

timepicker: add test harnesses

timepicker: add timepicker component

bottom-sheet: add height minHeight maxHeight to config (#29794)

core: add missing system variables (#29624)

core: allow optgroup overrides through core-overrides (#29897)

core: avoid browser inconsistencies when parsing time

core: avoid having to manually load ripple styles

core: change ng-add to use mat.theme (#29990)

core: correctly identify color input (#29909)

core: delete deprecated APIs (#29651)

core: drop sanity checks (#29688)

core: option showing double selected indicator in high contrast mode

core: remove unused motion system vars (#29920)

core: rename sys vars from mat-app to mat-sys (#29879)

core: stop manually instantiating MatRipple directive (#29630)

core: update prebuilt themes to use mat.theme (#29989)

datepicker: calendar font tokens not being picked up (#29610)

... (truncated)

Changelog

Sourced from @angular/cdk's changelog.

19.0.0 "hafnium-hippo" (2024-11-19)

Breaking Changes

cdk

Since cdk.high-contrast targets a media query instead of a class, the specificity of the styles it emits is lower than before.

The overlay stays are now loaded slightly later than before which can change their specificity. You may have to update any overlay style overrides.

Virtual scrolling lists now have proper type checking which can reveal some previously-hidden compilation errors.

fix(cdk/scrolling): adds ngTemplateContextGuard

implements ngTemplateContextGuard for CdkVirtualForOf directive

material

The ripples styles are now loaded slightly later than before which can change their specificity. You may have to update any ripple style overrides.

mixinColor and CanColor have been removed. Use a host binding instead.

mixinDisableRipple and CanDisableRipple have been removed. Use input transforms instead.

mixinDisabled and CanDisable have been removed. Use input transforms instead.

mixinInitialized and HasInitialized have been removed. Use a Subject that emits in ngOnInit instead.

mixinTabIndex and HasTabIndex have been removed. Use input transforms instead.

google-maps

The new @googlemaps/markerclusterer API should be imported instead of the old one. Read more at: https://github.com/googlemaps/js-markerclusterer

The MapMarkerClusterer class has been renamed to DeprecatedMapMarkerClusterer.

The map-marker-clusterer selector has been changed to deprecated-map-marker-clusterer.

multiple

In order for Material to be compatible with recent changes in Sass and upcoming changes in the CSS standard, tokens are now emitted in-place, rather the being hoisted to the top of the selector. As a result, some token overrides might not apply anymore. This is relevant primarily for the cases like @include mat.button-theme($theme); --mat-button-color: red;. It can be resolved by wrapping the overrides with & {}, for example @include mat.button-theme($theme); & { --mat-button-color: red; }.

MatButton.ripple is no longer available.

MatCheckbox.ripple is no longer available.

MatChip.ripple is no longer available.

material-date-fns-adapter

Commit Type Description

234e5e0e8 feat add support for date-fns 4 (#29744)

youtube-player

Commit Type Description

09da06b42 fix ready event not emitting

288598750 fix startSeconds not applied when using placeholder

google-maps

Commit Type Description

1bd976c6a feat Add support for some mouse events #29741 (#29747)

a05475e76 feat deprecate marker cluster component

c70aae15b feat implement new marker clusterer

b9deeee85 fix add schematic to switch to the new clusterer name

a6709497f fix expose all clusterer types (#29905)

74c2a081f fix resolve CLI errors in ng update schematic (#29947)

material

Commit Type Description

9122335b2 feat checkbox: add new aria properties to MatCheckbox (#29457)

64ed7ca71 feat core: add experimental theme demo (#29636)

a58e6f671 feat core: add theme-overrides mixin (#29858)

... (truncated)

Commits

2f3cea1 release: cut the v19.0.0 release
56834a2 build: update to v19 final (#30045)
734f296 docs: fix broken links (#30038)
370e6cc release: cut the v19.0.0-rc.3 release
05c78af fix(cdk/table): run differ for all columns (#30012)
3a4158e refactor(cdk/testing): fix out of sync file (#30021)
dbcb921 fix(material/menu): handle keyboard events through dispatcher (#29997)
5345a87 fix(material/input): preserve aria-describedby set externally
5ba9792 fix(material/form-field): avoid touching the DOM on each state change
13beab5 release: cut the v19.0.0-rc.2 release
Additional commits viewable in compare view

Updates @angular/common from 18.2.12 to 19.0.1

Release notes

Sourced from @angular/common's releases.

v19.0.1

19.0.1 (2024-11-26)

compiler-cli

Commit Description

more accurate diagnostics for host binding parser errors (#58870)

core

Commit Description

correctly clear template HMR internal renderer cache (#58724)

correctly perform lazy routes migration for components with additional decorators (#58796)

Ensure _tick is always run within the TracingSnapshot. (#58881)

Ensure resource sets an error (#58855)

make component id generation more stable between client and server builds (#58813)

Prevents race condition of cleanup for incremental hydration (#58722)

forms

Commit Description

work around TypeScript 5.7 issue (#58731)

language-service

Commit Description

add fix for individual unused imports (#58719)

allow fixes to run without template info (#58719)

migrations

Commit Description

fix provide-initializer migration when using useFactory (#58518)

handle parameters with initializers in inject migration (#58769)

Mark hoisted properties as removed in inject migration (#58804)

v19.0.0

19.0.0 (2024-11-19)

Explore Angular v19 with a blog post from the Angular team: https://blog.angular.dev/meet-angular-v19-7b29dfd05b84

Breaking Changes

compiler

this.foo property reads no longer refer to template context variables. If you intended to read the template variable, do not use this..

core

Angular directives, components and pipes are now standalone by default.

Specify standalone: false for declarations that are currently declared in @NgModules.

ng update for v19 will take care of this automatically.

TypeScript versions less than 5.5 are no longer supported.

Timing changes for effect API (in developer preview):

effects which are triggered outside of change detection run as part of the change detection process instead of as a microtask. Depending on the

... (truncated)

Changelog

Sourced from @angular/common's changelog.

19.0.1 (2024-11-26)

compiler-cli

Commit Type Description

fb1fa8b0fc fix more accurate diagnostics for host binding parser errors (#58870)

core

Commit Type Description

502ee0e722 fix correctly clear template HMR internal renderer cache (#58724)

99715104a1 fix correctly perform lazy routes migration for components with additional decorators (#58796)

118803035f fix Ensure _tick is always run within the TracingSnapshot. (#58881)

08b9452f01 fix Ensure resource sets an error (#58855)

84f45ea3ff fix make component id generation more stable between client and server builds (#58813)

d3491c7cee fix Prevents race condition of cleanup for incremental hydration (#58722)

forms

Commit Type Description

4dfe5b6cef fix work around TypeScript 5.7 issue (#58731)

language-service

Commit Type Description

a983865bff fix add fix for individual unused imports (#58719)

e6e7a4e22b fix allow fixes to run without template info (#58719)

migrations

Commit Type Description

5ce10264a4 fix fix provide-initializer migration when using useFactory (#58518)

d4f5c85f60 fix handle parameters with initializers in inject migration (#58769)

a6d2d2dc10 fix Mark hoisted properties as removed in inject migration (#58804)

19.0.0 (2024-11-19)

Blog post: https://blog.angular.dev/meet-angular-v19-7b29dfd05b84

Breaking Changes

compiler

this.foo property reads no longer refer to template context variables. If you intended to read the template variable, do not use this..

core

Angular directives, components and pipes are now standalone by default.

Specify standalone: false for declarations that are currently declared in @NgModules.

ng update for v19 will take care of this automatically.

TypeScript versions less than 5.5 are no longer supported.

Timing changes for effect API (in developer preview):

effects which are triggered outside of change detection run as part of the change detection process instead of as a microtask. Depending on the specifics of application/test setup, this can result in them executing

... (truncated)

Commits

ea0bf74 refactor(core): use ApplicationRef.whenStable instead of a custom util func...
7dfb127 refactor: add @__PURE__ next to @pureOrBreakMyCode for improved bundler c...
da9c0c5 refactor: cleanup initializers that use ctor params (#58349)
24c6373 feat(common): add optional rounded transform support in cloudinary image load...
4b9accd feat(http): promote withRequestsMadeViaParent to stable. (#58221)
13c1306 feat(common): disable keyvalue sorting using null compareFn (#57487)
09df589 refactor(core): Migrate all packages with the explicit-standalone-flag sche...
08b4a8a docs: move JSDoc below constructor (#57187)
a36744e docs: move JSDoc before functions (#58087)
0eb1c5c docs(common): Minor typo in code example (#58085)
Additional commits viewable in compare view

Updates @angular/compiler from 18.2.12 to 19.0.1

Release notes

Sourced from @angular/compiler's releases.

v19.0.1

19.0.1 (2024-11-26)

compiler-cli

Commit Description

more accurate diagnostics for host binding parser errors (#58870)

core

Commit Description

correctly clear template HMR internal renderer cache (#58724)

correctly perform lazy routes migration for components with additional decorators (#58796)

Ensure _tick is always run within the TracingSnapshot. (#58881)

Ensure resource sets an error (#58855)

make component id generation more stable between client and server builds (#58813)

Prevents race condition of cleanup for incremental hydration (#58722)

forms

Commit Description

work around TypeScript 5.7 issue (#58731)

language-service

Commit Description

add fix for individual unused imports (#58719)

allow fixes to run without template info (#58719)

migrations

Commit Description

fix provide-initializer migration when using useFactory (#58518)

handle parameters with initializers in inject migration (#58769)

Mark hoisted properties as removed in inject migration (#58804)

v19.0.0

19.0.0 (2024-11-19)

Explore Angular v19 with a blog post from the Angular team: https://blog.angular.dev/meet-angular-v19-7b29dfd05b84

Breaking Changes

compiler

this.foo property reads no longer refer to template context variables. If you intended to read the template variable, do not use this..

core

Angular directives, components and pipes are now standalone by default.

Specify standalone: false for declarations that are currently declared in @NgModules.

ng update for v19 will take care of this automatically.

TypeScript versions less than 5.5 are no longer supported.

Timing changes for effect API (in developer preview):

effects which are triggered outside of change detection run as part of the change detection process instead of as a microtask. Depending on the

... (truncated)

Changelog

Sourced from @angular/compiler's changelog.

19.0.1 (2024-11-26)

compiler-cli

Commit Type Description

fb1fa8b0fc fix more accurate diagnostics for host binding parser errors (#58870)

core

Commit Type Description

502ee0e722 fix correctly clear template HMR internal renderer cache (#58724)

99715104a1 fix correctly perform lazy routes migration for components with additional decorators (#58796)

118803035f fix Ensure _tick is always run within the TracingSnapshot. (#58881)

08b9452f01 fix Ensure resource sets an error (#58855)

84f45ea3ff fix make component id generation more stable between client and server builds (#58813)

d3491c7cee fix Prevents race condition of cleanup for incremental hydration (#58722)

forms

Commit Type Description

4dfe5b6cef fix work around TypeScript 5.7 issue (#58731)

language-service

Commit Type Description

a983865bff fix add fix for individual unused imports (#58719)

e6e7a4e22b fix allow fixes to run without template info (#58719)

migrations

Commit Type Description

5ce10264a4 fix fix provide-initializer migration when u...
Description has been truncated

…se component styles

… implement confetti service

…ice usage in controllers

…or handling in GitHub connection, and improve loading component logic with reactive patterns

…sts, and adjust logging configuration

…ic, and update Copilot value component for cleaner data handling; add new dependency for monitoring node processes

… in metrics service queries, and improve error handling in query execution

…g, and improve change detection in components

…prove spacing in MetricsService, and enhance error handling in QueryService

…database logging in Database, and optimize metrics retrieval in MetricsService

…evels, and improve code formatting across various components

… and modify database synchronization strategy

…ance logging practices

…improve maintainability

…eation to enhance security and prevent SQL injection

… enterprise

…fety, and implement lifecycle hooks

…ent for IMember type in teams model

…dability, change Docker port mapping, and modify predictive modeling interface

MAJOR REFACTOR adding support for multiple orgs

…ates Bumps the production-dependencies group with 12 updates in the /frontend directory: | Package | From | To | | --- | --- | --- | | [@angular/animations](https://github.com/angular/angular/tree/HEAD/packages/animations) | `18.2.12` | `19.0.1` | | [@angular/cdk](https://github.com/angular/components) | `18.2.13` | `19.0.0` | | [@angular/common](https://github.com/angular/angular/tree/HEAD/packages/common) | `18.2.12` | `19.0.1` | | [@angular/compiler](https://github.com/angular/angular/tree/HEAD/packages/compiler) | `18.2.12` | `19.0.1` | | [@angular/core](https://github.com/angular/angular/tree/HEAD/packages/core) | `18.2.12` | `19.0.1` | | [@angular/forms](https://github.com/angular/angular/tree/HEAD/packages/forms) | `18.2.12` | `19.0.1` | | [@angular/material](https://github.com/angular/components) | `18.2.13` | `19.0.0` | | [@angular/platform-browser](https://github.com/angular/angular/tree/HEAD/packages/platform-browser) | `18.2.12` | `19.0.1` | | [@angular/platform-browser-dynamic](https://github.com/angular/angular/tree/HEAD/packages/platform-browser-dynamic) | `18.2.12` | `19.0.1` | | [@angular/router](https://github.com/angular/angular/tree/HEAD/packages/router) | `18.2.12` | `19.0.1` | | [@octokit/types](https://github.com/octokit/types.ts) | `13.6.1` | `13.6.2` | | [cronstrue](https://github.com/bradymholt/cronstrue) | `2.51.0` | `2.52.0` | Updates `@angular/animations` from 18.2.12 to 19.0.1 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/19.0.1/packages/animations) Updates `@angular/cdk` from 18.2.13 to 19.0.0 - [Release notes](https://github.com/angular/components/releases) - [Changelog](https://github.com/angular/components/blob/main/CHANGELOG.md) - [Commits](angular/components@18.2.13...19.0.0) Updates `@angular/common` from 18.2.12 to 19.0.1 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/19.0.1/packages/common) Updates `@angular/compiler` from 18.2.12 to 19.0.1 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/19.0.1/packages/compiler) Updates `@angular/core` from 18.2.12 to 19.0.1 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/19.0.1/packages/core) Updates `@angular/forms` from 18.2.12 to 19.0.1 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/19.0.1/packages/forms) Updates `@angular/material` from 18.2.13 to 19.0.0 - [Release notes](https://github.com/angular/components/releases) - [Changelog](https://github.com/angular/components/blob/main/CHANGELOG.md) - [Commits](angular/components@18.2.13...19.0.0) Updates `@angular/platform-browser` from 18.2.12 to 19.0.1 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/19.0.1/packages/platform-browser) Updates `@angular/platform-browser-dynamic` from 18.2.12 to 19.0.1 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/19.0.1/packages/platform-browser-dynamic) Updates `@angular/router` from 18.2.12 to 19.0.1 - [Release notes](https://github.com/angular/angular/releases) - [Changelog](https://github.com/angular/angular/blob/main/CHANGELOG.md) - [Commits](https://github.com/angular/angular/commits/19.0.1/packages/router) Updates `@octokit/types` from 13.6.1 to 13.6.2 - [Release notes](https://github.com/octokit/types.ts/releases) - [Commits](octokit/types.ts@v13.6.1...v13.6.2) Updates `cronstrue` from 2.51.0 to 2.52.0 - [Release notes](https://github.com/bradymholt/cronstrue/releases) - [Changelog](https://github.com/bradymholt/cRonstrue/blob/main/CHANGELOG.md) - [Commits](bradymholt/cRonstrue@v2.51.0...v2.52.0) --- updated-dependencies: - dependency-name: "@angular/animations" dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: "@angular/cdk" dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: "@angular/common" dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: "@angular/compiler" dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: "@angular/core" dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: "@angular/forms" dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: "@angular/material" dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: "@angular/platform-browser" dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: "@angular/platform-browser-dynamic" dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: "@angular/router" dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: "@octokit/types" dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: cronstrue dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2024-11-26T20:22:15Z

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Scorecard details

Package

Version

Score

Details

npm/@angular/animations

19.0.1

🟢 6.5

Details

Check	Score	Reason
Binary-Artifacts	🟢 10	no binaries found in the repo
Branch-Protection	🟢 6	branch protection is not maximal on development and all release branches
CI-Tests	🟢 10	3 out of 3 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices	⚠️ 2	badge detected: InProgress
Code-Review	⚠️ 0	Found 0/30 approved changesets -- score normalized to 0
Contributors	🟢 10	project has 38 contributing companies or organizations
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Dependency-Update-Tool	🟢 10	update tool detected
Fuzzing	🟢 10	project is fuzzed
License	🟢 10	license file detected
Maintained	🟢 10	30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Pinned-Dependencies	🟢 10	all dependencies are pinned
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Security-Policy	🟢 10	security policy file detected
Signed-Releases	⚠️ -1	no releases found
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Vulnerabilities	⚠️ 0	66 existing vulnerabilities detected

npm/@angular/cdk

19.0.0

🟢 7.4

Details

Check	Score	Reason
Binary-Artifacts	🟢 10	no binaries found in the repo
Branch-Protection	🟢 6	branch protection is not maximal on development and all release branches
CI-Tests	🟢 10	29 out of 29 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices	⚠️ 2	badge detected: in_progress
Code-Review	🟢 10	all changesets reviewed
Contributors	🟢 10	21 different organizations found -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Dependency-Update-Tool	🟢 10	update tool detected
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 10	license file detected
Maintained	🟢 10	30 commit(s) out of 30 and 12 issue activity out of 30 found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	no published package detected
Pinned-Dependencies	🟢 10	all dependencies are pinned
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Security-Policy	🟢 10	security policy file detected
Signed-Releases	⚠️ -1	no releases found
Token-Permissions	🟢 8	detected GitHub workflow tokens with excessive permissions
Vulnerabilities	⚠️ 0	51 existing vulnerabilities detected

npm/@angular/common

19.0.1

🟢 6.5

Details

Check	Score	Reason
Binary-Artifacts	🟢 10	no binaries found in the repo
Branch-Protection	🟢 6	branch protection is not maximal on development and all release branches
CI-Tests	🟢 10	3 out of 3 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices	⚠️ 2	badge detected: InProgress
Code-Review	⚠️ 0	Found 0/30 approved changesets -- score normalized to 0
Contributors	🟢 10	project has 38 contributing companies or organizations
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Dependency-Update-Tool	🟢 10	update tool detected
Fuzzing	🟢 10	project is fuzzed
License	🟢 10	license file detected
Maintained	🟢 10	30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Pinned-Dependencies	🟢 10	all dependencies are pinned
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Security-Policy	🟢 10	security policy file detected
Signed-Releases	⚠️ -1	no releases found
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Vulnerabilities	⚠️ 0	66 existing vulnerabilities detected

npm/@angular/compiler

19.0.1

🟢 6.5

Details

Check	Score	Reason
Binary-Artifacts	🟢 10	no binaries found in the repo
Branch-Protection	🟢 6	branch protection is not maximal on development and all release branches
CI-Tests	🟢 10	3 out of 3 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices	⚠️ 2	badge detected: InProgress
Code-Review	⚠️ 0	Found 0/30 approved changesets -- score normalized to 0
Contributors	🟢 10	project has 38 contributing companies or organizations
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Dependency-Update-Tool	🟢 10	update tool detected
Fuzzing	🟢 10	project is fuzzed
License	🟢 10	license file detected
Maintained	🟢 10	30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Pinned-Dependencies	🟢 10	all dependencies are pinned
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Security-Policy	🟢 10	security policy file detected
Signed-Releases	⚠️ -1	no releases found
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Vulnerabilities	⚠️ 0	66 existing vulnerabilities detected

npm/@angular/core

19.0.1

🟢 6.5

Details

Check	Score	Reason
Binary-Artifacts	🟢 10	no binaries found in the repo
Branch-Protection	🟢 6	branch protection is not maximal on development and all release branches
CI-Tests	🟢 10	3 out of 3 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices	⚠️ 2	badge detected: InProgress
Code-Review	⚠️ 0	Found 0/30 approved changesets -- score normalized to 0
Contributors	🟢 10	project has 38 contributing companies or organizations
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Dependency-Update-Tool	🟢 10	update tool detected
Fuzzing	🟢 10	project is fuzzed
License	🟢 10	license file detected
Maintained	🟢 10	30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Pinned-Dependencies	🟢 10	all dependencies are pinned
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Security-Policy	🟢 10	security policy file detected
Signed-Releases	⚠️ -1	no releases found
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Vulnerabilities	⚠️ 0	66 existing vulnerabilities detected

npm/@angular/forms

19.0.1

🟢 6.5

Details

Check	Score	Reason
Binary-Artifacts	🟢 10	no binaries found in the repo
Branch-Protection	🟢 6	branch protection is not maximal on development and all release branches
CI-Tests	🟢 10	3 out of 3 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices	⚠️ 2	badge detected: InProgress
Code-Review	⚠️ 0	Found 0/30 approved changesets -- score normalized to 0
Contributors	🟢 10	project has 38 contributing companies or organizations
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Dependency-Update-Tool	🟢 10	update tool detected
Fuzzing	🟢 10	project is fuzzed
License	🟢 10	license file detected
Maintained	🟢 10	30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Pinned-Dependencies	🟢 10	all dependencies are pinned
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Security-Policy	🟢 10	security policy file detected
Signed-Releases	⚠️ -1	no releases found
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Vulnerabilities	⚠️ 0	66 existing vulnerabilities detected

npm/@angular/material

19.0.0

🟢 7.4

Details

Check	Score	Reason
Binary-Artifacts	🟢 10	no binaries found in the repo
Branch-Protection	🟢 6	branch protection is not maximal on development and all release branches
CI-Tests	🟢 10	29 out of 29 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices	⚠️ 2	badge detected: in_progress
Code-Review	🟢 10	all changesets reviewed
Contributors	🟢 10	21 different organizations found -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Dependency-Update-Tool	🟢 10	update tool detected
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 10	license file detected
Maintained	🟢 10	30 commit(s) out of 30 and 12 issue activity out of 30 found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	no published package detected
Pinned-Dependencies	🟢 10	all dependencies are pinned
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Security-Policy	🟢 10	security policy file detected
Signed-Releases	⚠️ -1	no releases found
Token-Permissions	🟢 8	detected GitHub workflow tokens with excessive permissions
Vulnerabilities	⚠️ 0	51 existing vulnerabilities detected

npm/@angular/platform-browser

19.0.1

🟢 6.5

Details

Check	Score	Reason
Binary-Artifacts	🟢 10	no binaries found in the repo
Branch-Protection	🟢 6	branch protection is not maximal on development and all release branches
CI-Tests	🟢 10	3 out of 3 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices	⚠️ 2	badge detected: InProgress
Code-Review	⚠️ 0	Found 0/30 approved changesets -- score normalized to 0
Contributors	🟢 10	project has 38 contributing companies or organizations
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Dependency-Update-Tool	🟢 10	update tool detected
Fuzzing	🟢 10	project is fuzzed
License	🟢 10	license file detected
Maintained	🟢 10	30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Pinned-Dependencies	🟢 10	all dependencies are pinned
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Security-Policy	🟢 10	security policy file detected
Signed-Releases	⚠️ -1	no releases found
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Vulnerabilities	⚠️ 0	66 existing vulnerabilities detected

npm/@angular/platform-browser-dynamic

19.0.1

🟢 6.5

Details

Check	Score	Reason
Binary-Artifacts	🟢 10	no binaries found in the repo
Branch-Protection	🟢 6	branch protection is not maximal on development and all release branches
CI-Tests	🟢 10	3 out of 3 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices	⚠️ 2	badge detected: InProgress
Code-Review	⚠️ 0	Found 0/30 approved changesets -- score normalized to 0
Contributors	🟢 10	project has 38 contributing companies or organizations
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Dependency-Update-Tool	🟢 10	update tool detected
Fuzzing	🟢 10	project is fuzzed
License	🟢 10	license file detected
Maintained	🟢 10	30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Pinned-Dependencies	🟢 10	all dependencies are pinned
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Security-Policy	🟢 10	security policy file detected
Signed-Releases	⚠️ -1	no releases found
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Vulnerabilities	⚠️ 0	66 existing vulnerabilities detected

npm/@angular/router

19.0.1

🟢 6.5

Details

Check	Score	Reason
Binary-Artifacts	🟢 10	no binaries found in the repo
Branch-Protection	🟢 6	branch protection is not maximal on development and all release branches
CI-Tests	🟢 10	3 out of 3 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices	⚠️ 2	badge detected: InProgress
Code-Review	⚠️ 0	Found 0/30 approved changesets -- score normalized to 0
Contributors	🟢 10	project has 38 contributing companies or organizations
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Dependency-Update-Tool	🟢 10	update tool detected
Fuzzing	🟢 10	project is fuzzed
License	🟢 10	license file detected
Maintained	🟢 10	30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Pinned-Dependencies	🟢 10	all dependencies are pinned
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Security-Policy	🟢 10	security policy file detected
Signed-Releases	⚠️ -1	no releases found
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Vulnerabilities	⚠️ 0	66 existing vulnerabilities detected

npm/@octokit/types

13.6.2

🟢 7.2

Details

Check	Score	Reason
Maintained	🟢 8	8 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 8
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Code-Review	🟢 10	all changesets reviewed
Security-Policy	🟢 9	security policy file detected
Pinned-Dependencies	🟢 3	dependency not pinned by hash detected -- score normalized to 3
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Packaging	🟢 10	packaging workflow detected
SAST	🟢 10	SAST tool is run on all commits
Vulnerabilities	🟢 8	2 existing vulnerabilities detected

npm/cronstrue

2.52.0

🟢 3.6

Details

Check	Score	Reason
Code-Review	⚠️ 2	Found 7/28 approved changesets -- score normalized to 2
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Packaging	⚠️ -1	packaging workflow not detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Maintained	🟢 4	3 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 4
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Security-Policy	⚠️ 0	security policy file not detected
License	🟢 10	license file detected
Fuzzing	⚠️ 0	project is not fuzzed
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases	⚠️ 0	Project has not signed or included provenance with any releases.
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities	🟢 6	4 existing vulnerabilities detected

npm/zone.js

0.15.0

🟢 6.5

Details

Check	Score	Reason
Binary-Artifacts	🟢 10	no binaries found in the repo
Branch-Protection	🟢 6	branch protection is not maximal on development and all release branches
CI-Tests	🟢 10	3 out of 3 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices	⚠️ 2	badge detected: InProgress
Code-Review	⚠️ 0	Found 0/30 approved changesets -- score normalized to 0
Contributors	🟢 10	project has 38 contributing companies or organizations
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Dependency-Update-Tool	🟢 10	update tool detected
Fuzzing	🟢 10	project is fuzzed
License	🟢 10	license file detected
Maintained	🟢 10	30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Pinned-Dependencies	🟢 10	all dependencies are pinned
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Security-Policy	🟢 10	security policy file detected
Signed-Releases	⚠️ -1	no releases found
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Vulnerabilities	⚠️ 0	66 existing vulnerabilities detected

npm/@angular/animations

^19.0.1

🟢 6.5

Details

Check	Score	Reason
Binary-Artifacts	🟢 10	no binaries found in the repo
Branch-Protection	🟢 6	branch protection is not maximal on development and all release branches
CI-Tests	🟢 10	3 out of 3 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices	⚠️ 2	badge detected: InProgress
Code-Review	⚠️ 0	Found 0/30 approved changesets -- score normalized to 0
Contributors	🟢 10	project has 38 contributing companies or organizations
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Dependency-Update-Tool	🟢 10	update tool detected
Fuzzing	🟢 10	project is fuzzed
License	🟢 10	license file detected
Maintained	🟢 10	30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Pinned-Dependencies	🟢 10	all dependencies are pinned
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Security-Policy	🟢 10	security policy file detected
Signed-Releases	⚠️ -1	no releases found
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Vulnerabilities	⚠️ 0	66 existing vulnerabilities detected

npm/@angular/cdk

^19.0.0

🟢 7.4

Details

Check	Score	Reason
Binary-Artifacts	🟢 10	no binaries found in the repo
Branch-Protection	🟢 6	branch protection is not maximal on development and all release branches
CI-Tests	🟢 10	29 out of 29 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices	⚠️ 2	badge detected: in_progress
Code-Review	🟢 10	all changesets reviewed
Contributors	🟢 10	21 different organizations found -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Dependency-Update-Tool	🟢 10	update tool detected
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 10	license file detected
Maintained	🟢 10	30 commit(s) out of 30 and 12 issue activity out of 30 found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	no published package detected
Pinned-Dependencies	🟢 10	all dependencies are pinned
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Security-Policy	🟢 10	security policy file detected
Signed-Releases	⚠️ -1	no releases found
Token-Permissions	🟢 8	detected GitHub workflow tokens with excessive permissions
Vulnerabilities	⚠️ 0	51 existing vulnerabilities detected

npm/@angular/common

^19.0.1

🟢 6.5

Details

Check	Score	Reason
Binary-Artifacts	🟢 10	no binaries found in the repo
Branch-Protection	🟢 6	branch protection is not maximal on development and all release branches
CI-Tests	🟢 10	3 out of 3 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices	⚠️ 2	badge detected: InProgress
Code-Review	⚠️ 0	Found 0/30 approved changesets -- score normalized to 0
Contributors	🟢 10	project has 38 contributing companies or organizations
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Dependency-Update-Tool	🟢 10	update tool detected
Fuzzing	🟢 10	project is fuzzed
License	🟢 10	license file detected
Maintained	🟢 10	30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Pinned-Dependencies	🟢 10	all dependencies are pinned
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Security-Policy	🟢 10	security policy file detected
Signed-Releases	⚠️ -1	no releases found
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Vulnerabilities	⚠️ 0	66 existing vulnerabilities detected

npm/@angular/compiler

^19.0.1

🟢 6.5

Details

Check	Score	Reason
Binary-Artifacts	🟢 10	no binaries found in the repo
Branch-Protection	🟢 6	branch protection is not maximal on development and all release branches
CI-Tests	🟢 10	3 out of 3 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices	⚠️ 2	badge detected: InProgress
Code-Review	⚠️ 0	Found 0/30 approved changesets -- score normalized to 0
Contributors	🟢 10	project has 38 contributing companies or organizations
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Dependency-Update-Tool	🟢 10	update tool detected
Fuzzing	🟢 10	project is fuzzed
License	🟢 10	license file detected
Maintained	🟢 10	30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Pinned-Dependencies	🟢 10	all dependencies are pinned
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Security-Policy	🟢 10	security policy file detected
Signed-Releases	⚠️ -1	no releases found
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Vulnerabilities	⚠️ 0	66 existing vulnerabilities detected

npm/@angular/core

^19.0.1

🟢 6.5

Details

Check	Score	Reason
Binary-Artifacts	🟢 10	no binaries found in the repo
Branch-Protection	🟢 6	branch protection is not maximal on development and all release branches
CI-Tests	🟢 10	3 out of 3 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices	⚠️ 2	badge detected: InProgress
Code-Review	⚠️ 0	Found 0/30 approved changesets -- score normalized to 0
Contributors	🟢 10	project has 38 contributing companies or organizations
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Dependency-Update-Tool	🟢 10	update tool detected
Fuzzing	🟢 10	project is fuzzed
License	🟢 10	license file detected
Maintained	🟢 10	30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Pinned-Dependencies	🟢 10	all dependencies are pinned
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Security-Policy	🟢 10	security policy file detected
Signed-Releases	⚠️ -1	no releases found
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Vulnerabilities	⚠️ 0	66 existing vulnerabilities detected

npm/@angular/forms

^19.0.1

🟢 6.5

Details

Check	Score	Reason
Binary-Artifacts	🟢 10	no binaries found in the repo
Branch-Protection	🟢 6	branch protection is not maximal on development and all release branches
CI-Tests	🟢 10	3 out of 3 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices	⚠️ 2	badge detected: InProgress
Code-Review	⚠️ 0	Found 0/30 approved changesets -- score normalized to 0
Contributors	🟢 10	project has 38 contributing companies or organizations
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Dependency-Update-Tool	🟢 10	update tool detected
Fuzzing	🟢 10	project is fuzzed
License	🟢 10	license file detected
Maintained	🟢 10	30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Pinned-Dependencies	🟢 10	all dependencies are pinned
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Security-Policy	🟢 10	security policy file detected
Signed-Releases	⚠️ -1	no releases found
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Vulnerabilities	⚠️ 0	66 existing vulnerabilities detected

npm/@angular/material

^19.0.0

🟢 7.4

Details

Check	Score	Reason
Binary-Artifacts	🟢 10	no binaries found in the repo
Branch-Protection	🟢 6	branch protection is not maximal on development and all release branches
CI-Tests	🟢 10	29 out of 29 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices	⚠️ 2	badge detected: in_progress
Code-Review	🟢 10	all changesets reviewed
Contributors	🟢 10	21 different organizations found -- score normalized to 10
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Dependency-Update-Tool	🟢 10	update tool detected
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 10	license file detected
Maintained	🟢 10	30 commit(s) out of 30 and 12 issue activity out of 30 found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	no published package detected
Pinned-Dependencies	🟢 10	all dependencies are pinned
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Security-Policy	🟢 10	security policy file detected
Signed-Releases	⚠️ -1	no releases found
Token-Permissions	🟢 8	detected GitHub workflow tokens with excessive permissions
Vulnerabilities	⚠️ 0	51 existing vulnerabilities detected

npm/@angular/platform-browser

^19.0.1

🟢 6.5

Details

Check	Score	Reason
Binary-Artifacts	🟢 10	no binaries found in the repo
Branch-Protection	🟢 6	branch protection is not maximal on development and all release branches
CI-Tests	🟢 10	3 out of 3 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices	⚠️ 2	badge detected: InProgress
Code-Review	⚠️ 0	Found 0/30 approved changesets -- score normalized to 0
Contributors	🟢 10	project has 38 contributing companies or organizations
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Dependency-Update-Tool	🟢 10	update tool detected
Fuzzing	🟢 10	project is fuzzed
License	🟢 10	license file detected
Maintained	🟢 10	30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Pinned-Dependencies	🟢 10	all dependencies are pinned
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Security-Policy	🟢 10	security policy file detected
Signed-Releases	⚠️ -1	no releases found
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Vulnerabilities	⚠️ 0	66 existing vulnerabilities detected

npm/@angular/platform-browser-dynamic

^19.0.1

🟢 6.5

Details

Check	Score	Reason
Binary-Artifacts	🟢 10	no binaries found in the repo
Branch-Protection	🟢 6	branch protection is not maximal on development and all release branches
CI-Tests	🟢 10	3 out of 3 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices	⚠️ 2	badge detected: InProgress
Code-Review	⚠️ 0	Found 0/30 approved changesets -- score normalized to 0
Contributors	🟢 10	project has 38 contributing companies or organizations
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Dependency-Update-Tool	🟢 10	update tool detected
Fuzzing	🟢 10	project is fuzzed
License	🟢 10	license file detected
Maintained	🟢 10	30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Pinned-Dependencies	🟢 10	all dependencies are pinned
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Security-Policy	🟢 10	security policy file detected
Signed-Releases	⚠️ -1	no releases found
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Vulnerabilities	⚠️ 0	66 existing vulnerabilities detected

npm/@angular/router

^19.0.1

🟢 6.5

Details

Check	Score	Reason
Binary-Artifacts	🟢 10	no binaries found in the repo
Branch-Protection	🟢 6	branch protection is not maximal on development and all release branches
CI-Tests	🟢 10	3 out of 3 merged PRs checked by a CI test -- score normalized to 10
CII-Best-Practices	⚠️ 2	badge detected: InProgress
Code-Review	⚠️ 0	Found 0/30 approved changesets -- score normalized to 0
Contributors	🟢 10	project has 38 contributing companies or organizations
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Dependency-Update-Tool	🟢 10	update tool detected
Fuzzing	🟢 10	project is fuzzed
License	🟢 10	license file detected
Maintained	🟢 10	30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10
Packaging	⚠️ -1	packaging workflow not detected
Pinned-Dependencies	🟢 10	all dependencies are pinned
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Security-Policy	🟢 10	security policy file detected
Signed-Releases	⚠️ -1	no releases found
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Vulnerabilities	⚠️ 0	66 existing vulnerabilities detected

npm/@octokit/types

^13.6.2

🟢 7.2

Details

Check	Score	Reason
Maintained	🟢 8	8 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 8
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Code-Review	🟢 10	all changesets reviewed
Security-Policy	🟢 9	security policy file detected
Pinned-Dependencies	🟢 3	dependency not pinned by hash detected -- score normalized to 3
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 10	license file detected
Signed-Releases	⚠️ -1	no releases found
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Packaging	🟢 10	packaging workflow detected
SAST	🟢 10	SAST tool is run on all commits
Vulnerabilities	🟢 8	2 existing vulnerabilities detected

npm/cronstrue

^2.52.0

🟢 3.6

Details

Check	Score	Reason
Code-Review	⚠️ 2	Found 7/28 approved changesets -- score normalized to 2
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
Packaging	⚠️ -1	packaging workflow not detected
Binary-Artifacts	🟢 10	no binaries found in the repo
Maintained	🟢 4	3 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 4
Pinned-Dependencies	⚠️ 0	dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Security-Policy	⚠️ 0	security policy file not detected
License	🟢 10	license file detected
Fuzzing	⚠️ 0	project is not fuzzed
Branch-Protection	⚠️ -1	internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration
Signed-Releases	⚠️ 0	Project has not signed or included provenance with any releases.
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0
Vulnerabilities	🟢 6	4 existing vulnerabilities detected

Scanned Files

frontend/package-lock.json
frontend/package.json

dependabot · 2024-12-02T15:36:34Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

austenstone and others added 24 commits November 21, 2024 22:55

Add database connection status to setup response and implement databa…

cf150f3

…se component styles

Implement database connection and refactor database initialization logic

33e5219

Refactor survey and metrics services, update component templates, and…

615299a

… implement confetti service

Refactor logging level, remove console logs, and update settings serv…

66d9b81

…ice usage in controllers

Refactor setup service to simplify getSetupStatus method, enhance err…

7dab661

…or handling in GitHub connection, and improve loading component logic with reactive patterns

Refactor services and tests: update service imports, remove unused te…

1f4b47d

…sts, and adjust logging configuration

Refactor GitHub disconnect method, enhance usage controller query log…

6eec8c4

…ic, and update Copilot value component for cleaner data handling; add new dependency for monitoring node processes

Refactor GitHub query service logging, enforce required relationships…

fd62476

… in metrics service queries, and improve error handling in query execution

Refactor application code: remove console logs, enhance error handlin…

a33b843

…g, and improve change detection in components

Refactor services: enforce required relationships in SeatsService, im…

9cf43d3

…prove spacing in MetricsService, and enhance error handling in QueryService

Refactor services: enhance error logging in SeatsController, improve …

14b3323

…database logging in Database, and optimize metrics retrieval in MetricsService

Refactor services: update method names for clarity, enhance logging l…

6d9883b

…evels, and improve code formatting across various components

Refactor services: update survey owner to org, enhance error logging,…

a1a3260

… and modify database synchronization strategy

Refactor services: remove console logs from various components to enh…

4786002

…ance logging practices

Refactor tests: remove survey test file to streamline test suite and …

c192669

…improve maintainability

Delete backend/.env copy

9124941

Merge branch 'main' into enterprise

582b82b

Refactor database connection: use parameterized query for database cr…

e6917df

…eation to enhance security and prevent SQL injection

Merge branch 'enterprise' of github.com:austenstone/github-value into…

3e5d4c7

… enterprise

Refactor services and components: streamline imports, enhance type sa…

23a6c67

…fety, and implement lifecycle hooks

Remove unused OAuth properties from GitHub configuration and add comm…

9a870d5

…ent for IMember type in teams model

Refactor code structure: update target values method for improved rea…

db3c752

…dability, change Docker port mapping, and modify predictive modeling interface

Merge pull request #69 from austenstone/enterprise

9a8c2c3

MAJOR REFACTOR adding support for multiple orgs

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 26, 2024

austenstone force-pushed the main branch from ce62ded to 789a344 Compare November 27, 2024 15:24

dependabot bot closed this Dec 2, 2024

dependabot bot deleted the dependabot/npm_and_yarn/frontend/production-dependencies-06a8dfe931 branch December 2, 2024 15:36

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the production-dependencies group across 1 directory with 12 updates #71

Bump the production-dependencies group across 1 directory with 12 updates #71

Uh oh!

dependabot bot commented on behalf of github Nov 26, 2024 •

edited

Loading

Uh oh!

github-actions bot commented Nov 26, 2024

Uh oh!

dependabot bot commented on behalf of github Dec 2, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Commit	Description
	correctly clear template HMR internal renderer cache (#58724)
	correctly perform lazy routes migration for components with additional decorators (#58796)
	Ensure _tick is always run within the TracingSnapshot. (#58881)
	Ensure resource sets an error (#58855)
	make component id generation more stable between client and server builds (#58813)
	Prevents race condition of cleanup for incremental hydration (#58722)

Commit	Description
	add fix for individual unused imports (#58719)
	allow fixes to run without template info (#58719)

Commit	Description
	fix provide-initializer migration when using useFactory (#58518)
	handle parameters with initializers in inject migration (#58769)
	Mark hoisted properties as removed in inject migration (#58804)

Commit	Type	Description
502ee0e722	fix	correctly clear template HMR internal renderer cache (#58724)
99715104a1	fix	correctly perform lazy routes migration for components with additional decorators (#58796)
118803035f	fix	Ensure _tick is always run within the TracingSnapshot. (#58881)
08b9452f01	fix	Ensure resource sets an error (#58855)
84f45ea3ff	fix	make component id generation more stable between client and server builds (#58813)
d3491c7cee	fix	Prevents race condition of cleanup for incremental hydration (#58722)

Commit	Type	Description
a983865bff	fix	add fix for individual unused imports (#58719)
e6e7a4e22b	fix	allow fixes to run without template info (#58719)

Commit	Type	Description
5ce10264a4	fix	fix provide-initializer migration when using useFactory (#58518)
d4f5c85f60	fix	handle parameters with initializers in inject migration (#58769)
a6d2d2dc10	fix	Mark hoisted properties as removed in inject migration (#58804)

Commit	Description
	a11y: use native media query for high contrast detection (#29678)
	private: create cdk-visually-hidden style loader (#29757)
	overlay: avoid having to manually load structural styles
	overlay: load structural styles in a cascade layer (#29725)
	portal: remove ComponentFactoryResolver usages (#27427)
	scrolling: adds ngTemplateContextGuard (#27276)
	text-field: avoid having to manually load text field styles
	tree: fix issue where `isExpanded` wouldn't be set if placed before `isExpandable` (#29565)
	tree: only handle keyboard events directly from the node (#29861)
	tree: warn if mixed node types are used within the same tree

Commit	Description
	checkbox: add new aria properties to MatCheckbox (#29457)
	core: add experimental theme demo (#29636)
	core: add theme-overrides mixin (#29858)
	core: create focus-indicator structural styles loader (#29763)
	core: default to color-scheme theme type (#29907)
	core: deprecate the core mixin (#29906)
	core: rename theme mixin (#29857)
	core: switch system prefix from sys to mat-sys (#29908)
	input: add the ability to interact with disabled inputs (#29574)
	schematics: create v19 core removal schematic (#29768)
	schematics: Switch custom theme schematic to use theme mixin instead of define-theme and add high contrast override mixins (#29642)
	schematics: Update custom theme schematic to work with light-dark and use theme-overrides mixin (#29911)
	tabs: add `alignTabs` in `MatTabsConfig` (#29779)
	theming: Disambiguate token names in theme overrides (#29859)
	timepicker: add test harnesses
	timepicker: add timepicker component
	bottom-sheet: add `height` `minHeight` `maxHeight` to config (#29794)
	core: add missing system variables (#29624)
	core: allow optgroup overrides through core-overrides (#29897)
	core: avoid browser inconsistencies when parsing time
	core: avoid having to manually load ripple styles
	core: change ng-add to use mat.theme (#29990)
	core: correctly identify color input (#29909)
	core: delete deprecated APIs (#29651)
	core: drop sanity checks (#29688)
	core: option showing double selected indicator in high contrast mode
	core: remove unused motion system vars (#29920)
	core: rename sys vars from mat-app to mat-sys (#29879)
	core: stop manually instantiating MatRipple directive (#29630)
	core: update prebuilt themes to use mat.theme (#29989)
	datepicker: calendar font tokens not being picked up (#29610)

Commit	Type	Description
09da06b42	fix	ready event not emitting
288598750	fix	startSeconds not applied when using placeholder

Commit	Type	Description
1bd976c6a	feat	Add support for some mouse events #29741 (#29747)
a05475e76	feat	deprecate marker cluster component
c70aae15b	feat	implement new marker clusterer
b9deeee85	fix	add schematic to switch to the new clusterer name
a6709497f	fix	expose all clusterer types (#29905)
74c2a081f	fix	resolve CLI errors in ng update schematic (#29947)

Commit	Type	Description
9122335b2	feat	checkbox: add new aria properties to MatCheckbox (#29457)
64ed7ca71	feat	core: add experimental theme demo (#29636)
a58e6f671	feat	core: add theme-overrides mixin (#29858)

Uh oh!

Bump the production-dependencies group across 1 directory with 12 updates #71

Bump the production-dependencies group across 1 directory with 12 updates #71

Uh oh!

Conversation

dependabot bot commented on behalf of github Nov 26, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v19.0.1

19.0.1 (2024-11-26)

compiler-cli

core

forms

language-service

migrations

v19.0.0

19.0.0 (2024-11-19)

Breaking Changes

compiler

core

19.0.1 (2024-11-26)

compiler-cli

core

forms

language-service

migrations

19.0.0 (2024-11-19)

Breaking Changes

compiler

core

v19.0.0

19.0.0 "hafnium-hippo" (2024-11-19)

cdk

material

19.0.0 "hafnium-hippo" (2024-11-19)

Breaking Changes

cdk

material

google-maps

multiple

material-date-fns-adapter

youtube-player

google-maps

material

v19.0.1

19.0.1 (2024-11-26)

compiler-cli

core

forms

language-service

migrations

v19.0.0

19.0.0 (2024-11-19)

Breaking Changes

compiler

core

19.0.1 (2024-11-26)

compiler-cli

core

forms

language-service

migrations

19.0.0 (2024-11-19)

Breaking Changes

compiler

core

v19.0.1

19.0.1 (2024-11-26)

compiler-cli

core

forms

language-service

migrations

v19.0.0

19.0.0 (2024-11-19)

Breaking Changes

compiler

core

19.0.1 (2024-11-26)

compiler-cli

core

dependabot bot commented on behalf of github Nov 26, 2024 •

edited

Loading