image-size dependency has a high vulnerability and no longer being maintained - CVE-2025-71330 and CVE-2025-71329

[stephenjtyrrell]

Command

build

Is this a regression?

• Yes, this behavior used to work in the previous version

The previous version in which this bug was not present was

No response

Description

image-size, which is a direct dependency for @angular/build has a high vulnerability and is no longer being maintained - CVE-2025-71330 and CVE-2025-71329.

Minimal Reproduction

.

Exception or Error

Your Environment

22.0.1

Anything else relevant?

No response

[alan-agius4]

image-size is a not a direct dependency, thus this is in actionable.