@newview/file-ui
1、构件选择组件增加排序
8
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
No source commit
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
newviewclub
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| phantom-deps | phantom-dep:@embedpdf/vue-pdf-viewer | AI (phantom-deps): Consumed via bundled dist files from Vite build; not a direct import in source. | ai | |
| source-diff | net-exec-file:dist/direct-engine-CzzT8DSZ-cf7e226e.js | AI (source-diff): PDF WASM engine uses fetch for WASM loading; standard pattern for this dependency. | ai | |
| source-diff | obfuscated-file:dist/index-8bb88267.js | AI (source-diff): Vite-bundled Vue component library output; readable imports visible in sample. | ai | |
| source-diff | net-exec-file:dist/index-8bb88267.js | AI (source-diff): Vue UI component bundle with API calls; standard for a file-management UI library. | ai | |
| source-diff | obfuscated-file:dist/worker-engine-BZRBQvei-e86f78f0.js | AI (source-diff): Web Worker for PDF engine; readable RemoteExecutor pattern in sample. | ai | |
| source-diff | net-exec-file:dist/worker-engine-BZRBQvei-e86f78f0.js | AI (source-diff): Worker postMessage pattern for PDF rendering; no suspicious network activity. | ai | |
| source-diff | source-size-tripled | AI (source-diff): Size increase from bundling @embedpdf PDF engine with WASM; expected. | ai | |
| source-diff | obfuscated-file:dist/direct-engine-CzzT8DSZ-cf7e226e.js | AI (source-diff): Bundled WASM/PDF engine from @embedpdf; minified build output, not obfuscation. | ai | |
| phantom-deps | phantom-dep:sass | AI (phantom-deps): sass is a build-time preprocessor referenced in vite config; phantom-dep is a stable false positive here. | ai | |
| phantom-deps | phantom-dep:vue-router | AI (phantom-deps): Config-file reference; Vue component libraries commonly reference router in config without direct imports. | ai | |
| phantom-deps | phantom-dep:@newview/ui | AI (phantom-deps): Same-org scoped package; phantom-dep heuristic is unreliable for intra-org dependencies. | ai | |
| phantom-deps | phantom-dep:view-ui-plus | AI (phantom-deps): Config-file reference only; stable false positive for this Vue UI library. | ai | |
| phantom-deps | phantom-dep:@vueup/vue-quill | AI (phantom-deps): Config-file reference only; stable false positive for this Vue UI library. | ai | |
| phantom-deps | phantom-dep:linq | AI (phantom-deps): Config-file reference only; not a runtime import concern for this build-tool pattern. | ai |