@nocobase/plugin-file-manager
Provides files storage services with files collection template and attachment field.
51
Versions
Apache-2.0
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
chenosjiannlu
Keywords
CollectionsCollection fields
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:dist/node_modules/cos-nodejs-sdk-v5/index.js | AI (source-diff): Minified webpack bundle of the legitimate cos-nodejs-sdk-v5 Tencent COS SDK; not malicious obfuscation. | ai | |
| source-diff | net-exec-file:dist/node_modules/cos-nodejs-sdk-v5/index.js | AI (source-diff): Network+exec pattern is inherent to the COS SDK bundle (HTTP requests + dynamic module loading); not a dropper. | ai | |
| source-diff | obfuscated-file:dist/node_modules/ali-oss/lib/client.js | AI (source-diff): Long lines are from minified bundling of ali-oss and its quickjs-emscripten dependency. Not obfuscation — legitimate open-source library code. | ai | |
| source-diff | net-exec-file:dist/node_modules/ali-oss/dist/aliyun-oss-sdk.js | AI (source-diff): This is the legitimate Alibaba Cloud OSS browser SDK v6.20.0 (ali-oss npm package). Network calls are to OSS endpoints; no malicious code execution pattern. | ai | |
| source-diff | large-new-source-files | AI (source-diff): Large file count increase is explained by bundling the ali-oss SDK and its dependencies into dist/node_modules for the first time in this version. | ai | |
| source-diff | net-exec-file:dist/node_modules/ali-oss/lib/client.js | AI (source-diff): Bundled ali-oss client with quickjs-emscripten sandbox. Network calls are for OSS storage operations; dynamic eval is the quickjs JS sandbox, not malware. | ai | |
| source-diff | net-exec-file:dist/node_modules/ali-oss/dist/aliyun-oss-sdk.min.js | AI (source-diff): Minified version of the legitimate ali-oss browser SDK. Same rationale as the non-minified version — standard cloud storage SDK behavior. | ai |
Versions (showing 51 of 119)
| Version | Deps | Published |
|---|---|---|
| 2.0.56 | 1 / 25 | |
| 2.0.55 | 1 / 25 | |
| 2.0.54 | 1 / 26 | |
| 2.0.53 | 1 / 26 | |
| 2.0.52 | 1 / 26 | |
| 2.0.51 | 1 / 26 | |
| 2.0.50 | 1 / 26 | |
| 2.0.49 | 1 / 26 | |
| 2.0.48 | 1 / 26 | |
| 2.0.47 | 1 / 26 | |
| 2.0.46 | 1 / 26 | |
| 2.0.45 | 1 / 26 | |
| 2.0.44 | 1 / 26 | |
| 2.0.43 | 1 / 26 | |
| 2.0.42 | 1 / 26 | |
| 2.0.41 | 1 / 26 | |
| 2.0.40 | 1 / 26 | |
| 2.0.39 | 1 / 26 | |
| 2.0.38 | 1 / 26 | |
| 2.0.37 | 1 / 26 | |
| 2.0.36 | 1 / 26 | |
| 2.0.35 | 1 / 26 | |
| 2.0.34 | 1 / 26 | |
| 2.0.33 | 1 / 26 | |
| 2.0.32 | 1 / 26 | |
| 2.0.31 | 1 / 26 | |
| 2.0.30 | 1 / 26 | |
| 2.0.29 | 1 / 26 | |
| 2.0.28 | 1 / 26 | |
| 2.0.27 | 1 / 26 | |
| 2.0.26 | 1 / 26 | |
| 2.0.25 | 1 / 26 | |
| 2.0.24 | 1 / 26 | |
| 2.0.23 | 1 / 26 | |
| 2.0.22 | 1 / 26 | |
| 2.0.21 | 1 / 26 | |
| 2.0.20 | 1 / 26 | |
| 2.0.19 | 1 / 26 | |
| 2.0.18 | 1 / 26 | |
| 2.0.17 | 1 / 26 | |
| 2.0.16 | 1 / 26 | |
| 2.0.15 | 1 / 26 | |
| 2.0.14 | 1 / 26 | |
| 2.0.13 | 1 / 26 | |
| 2.0.12 | 1 / 26 | |
| 2.0.11 | 1 / 26 | |
| 2.0.10 | 1 / 26 | |
| 2.0.9 | 1 / 26 | |
| 2.0.8 | 1 / 26 | |
| 2.0.7 | 1 / 26 | |
| 2.0.6 | 1 / 26 |