[mrighele]

Upgrading from AngularJS (1.x) to Angular (2+) is not trivial. They are two unrelated product that "by chance" share the same name.

[r3bl]

I understand that moving to Angular is not trivial, however this is old even for AngularJS.

1.7.x is in a long term support, while 1.6.x stopped being supported since July. The version they're running has at least three vulnerabilities: https://snyk.io/test/npm/angular/1.6.0

[mrighele]

Ah you're right about that. I was taking for granted that 1.6.x was the last before 2+.