Found 4 vulnerabilities on npm install

This is a result of the new npm version including the audit command.

It isn’t some new issue with the Angular CLI, npm just introduced new functionality in npm to warn users about vulnerabilities in the packages they’re installing – so there’s no “new” vulnerability in Angular, it’s just that now npm is now warning you about vulnerabilities that already existed:

https://blog.npmjs.org/

Most of the issues stem from Karma, so it’d need to be fixed there for the Angular team to pull in a new Karma version karma-runner/karma#2994

Leave a Comment