Hi Dirk, 
thanks for replying and thanks for pointing out the increased complexity of this issue. Glad you didn't abandon this topic.
In the first place we're aiming for securing basic angular concepts. E.g.: Organizing our app into Modules and Components, communication flow between them, correct usage of dependency injection, naming conventions and so on. In addidtion we need to check the correct usage of our own libraries, i.e. usage of specific classes or even methods within them. 
For doing so we need at least to check package and type hierarchies (like :CONTAINS in java scanner), 
dependencies between types (like :DEPENDS_ON and :INVOKES in java scanner), methods/fields within types (scanned artifact as well as used libraries), usage of decorators (@Component, 
@Injectable.
I guess there will be more but this would be a great start. Unfortunately, so far we couldn't find any other tool capable of this.