Credit where credit is due: the Angular team keeps their npm audit house in order! 2 of 47 packages with outstanding audits is *really* good.

organization level npm audit report for Angular showing 2 of 47 official packages with npm audits: @angular-devkit/architect 0.2202.5 @angular-devkit/build-ng-packagr 0.1002.0 4 moderate @angular-devkit/build-webpack 0.2202.5 @angular-devkit/core 22.2.5 @angular-devkit/schematics 22.2.5 @angular-devkit/schematics-cli 22.2.5 @angular/animation 4.0.0-beta.8 @angular/app-shell 0.1.0 @angular/aria 22.2.5 @angular/bazel 15.2.9 @angular/build 22.2.5 @angular/cdk 22.2.5 @angular/cdk-experimental 22.2.5 @angular/cli 22.2.5 @angular/common 22.2.3 @angular/compiler 22.2.3 @angular/compiler-cli 22.2.3 @angular/core 22.2.3 @angular/create 22.2.5 @angular/elements 22.2.3 @angular/fire 21.0.0 5 high @angular/forms 22.2.3 @angular/google-maps 22.2.5 @angular/language-server 22.2.3 @angular/language-service 22.2.3 @angular/localize 22.2.3 @angular/material 22.2.5 @angular/material-date-fns-adapter 22.2.5 @angular/material-experimental 22.2.5 @angular/material-luxon-adapter 22.2.5 @angular/material-moment-adapter 22.2.5 @angular/platform-browser 22.2.3 @angular/platform-browser-dynamic 22.2.3 @angular/platform-server 22.2.3 @angular/platform-webworker 10.2.3 @angular/platform-webworker-dynamic 10.2.3 @angular/pwa 22.2.5 @angular/router 22.2.3 @angular/router-deprecated 2.0.0-rc.2 @angular/service-worker 22.2.3 @angular/ssr 22.2.5 @angular/tsc-wrapped 4.4.6 @angular/typescript 2.0.0-5d0e199 @angular/upgrade 22.2.3 @angular/youtube-player 22.2.5 @schematics/angular 22.2.5 zone.js 0.16.3