← Home

@sapui5/sap.fe.templates

npm Homepage

SAPUI5 Library sap.fe.templates

100
Versions
SEE LICENSE IN LICENSE.txt
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures No source commit

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

sapnaassap_extncrepossap-ospo-admin

Keywords

sapui5ui5

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
source-diff obfuscated-file:src/sap/fe/templates/ObjectPage/designtime/ObjectPage.designtime.js AI (source-diff): SAP UI5 transpiled build artifact; standard framework patterns. ai
source-diff obfuscated-file:src/sap/fe/templates/ObjectPage/view/fragments/TransportSelection.js AI (source-diff): SAP UI5 transpiled build artifact; standard framework patterns. ai
source-diff obfuscated-file:src/sap/fe/templates/ObjectPage/flexibility/StashControlAndDisconnect.js AI (source-diff): SAP UI5 transpiled build artifact; standard framework patterns. ai
source-diff obfuscated-file:src/sap/fe/templates/ListReport/overrides/SideEffects.js AI (source-diff): SAP UI5 transpiled build artifact; standard framework patterns. ai
source-diff obfuscated-file:src/sap/fe/templates/ObjectPage/components/CollaborationDraft.js AI (source-diff): SAP UI5 transpiled build artifact; standard framework patterns. ai
source-diff obfuscated-file:src/sap/fe/templates/ObjectPage/overrides/CollaborationManager.js AI (source-diff): SAP UI5 transpiled build artifact; standard framework patterns. ai
source-diff obfuscated-file:src/sap/fe/templates/ObjectPage/components/DraftToggle.js AI (source-diff): SAP UI5 transpiled build artifact; standard framework patterns. ai
source-diff obfuscated-file:src/sap/fe/templates/ListReport/designtime/ListReport.designtime.helper.js AI (source-diff): SAP UI5 transpiled build artifact; standard framework patterns. ai
source-diff obfuscated-file:src/sap/fe/templates/ListReport/designtime/ListReport.designtime.js AI (source-diff): SAP UI5 transpiled build artifact; standard framework patterns. ai
source-diff obfuscated-file:src/sap/fe/templates/ObjectPage/designtime/ObjectPage.designtime.helper.js AI (source-diff): SAP UI5 transpiled build artifact; standard framework patterns. ai
source-diff obfuscated-file:src/sap/fe/templates/ObjectPage/components/CollaborationDiscardDialog.js AI (source-diff): SAP UI5 transpiled build output; readable collaboration dialog logic, not malicious obfuscation. ai
source-diff obfuscated-file:src/sap/fe/templates/ObjectPage/card/BaseCardContentProvider.js AI (source-diff): SAP UI5 transpiled build output; readable class structure, not malicious obfuscation. ai
source-diff obfuscated-file:src/sap/fe/templates/ObjectPage/card/AdaptiveCardContent.js AI (source-diff): SAP UI5 transpiled build output; sap.ui.define wrapper with readable JSDoc — not malicious obfuscation. ai
source-diff source-size-tripled AI (source-diff): Size increase attributable to new feature modules (Adaptive Cards, Collaboration); no injected payload indicators. ai
source-diff large-new-source-files AI (source-diff): New Adaptive Cards and Collaboration Draft feature modules; legitimate feature addition from SAP. ai
source-diff obfuscated-file:src/sap/fe/templates/ListReport/view/fragments/MultipleMode.block.js AI (source-diff): SAP UI5 transpiled build output; consistent with package distribution pattern. ai
source-diff obfuscated-file:src/sap/fe/templates/ListReport/LRMessageStrip.js AI (source-diff): SAP UI5 transpiled build output; consistent with package distribution pattern. ai
source-diff obfuscated-file:src/sap/fe/templates/ObjectPage/card/facets/HeaderTitle.js AI (source-diff): SAP UI5 transpiled build output; readable header title facet, not malicious obfuscation. ai
source-diff obfuscated-file:src/sap/fe/templates/ObjectPage/card/facets/HeaderContent.js AI (source-diff): SAP UI5 transpiled build output; readable header content facet, not malicious obfuscation. ai
source-diff obfuscated-file:src/sap/fe/templates/ObjectPage/card/actions/HeaderActions.js AI (source-diff): SAP UI5 transpiled build output; readable header actions logic, not malicious obfuscation. ai
source-diff obfuscated-file:src/sap/fe/templates/ObjectPage/card/Generator.js AI (source-diff): SAP UI5 transpiled build output; readable adaptive card generator, not malicious obfuscation. ai
source-diff obfuscated-file:src/sap/fe/templates/ObjectPage/ExtendPageDefinition.js AI (source-diff): SAP UI5 transpiled build output; readable page definition logic, not malicious obfuscation. ai
source-diff obfuscated-file:src/sap/fe/templates/ObjectPage/view/fragments/TransportSelection.block.js AI (source-diff): SAP-copyrighted SAPUI5 bundled module; long-line format is standard for SAP's UI5 build output. ai
source-diff obfuscated-file:src/sap/fe/templates/ObjectPage/helpers/SectionNavigationHelper.js AI (source-diff): SAP UI5 build output with copyright header and readable logic; long lines from minification are normal for this package family. ai
source-diff obfuscated-file:src/sap/fe/templates/ListReport/controls/MultipleModeControl.js AI (source-diff): Babel-transpiled SAPUI5 AMD module with SAP copyright; long lines are transpiler artifacts, not malicious obfuscation. ai
source-diff obfuscated-file:src/sap/fe/templates/ListReport/overrides/Share.js AI (source-diff): Babel-transpiled SAPUI5 AMD module with SAP copyright; long lines are transpiler artifacts. ai
source-diff obfuscated-file:src/sap/fe/templates/ObjectPage/ObjectPageTemplating.js AI (source-diff): Babel-transpiled SAPUI5 AMD module with SAP copyright; long lines are transpiler artifacts. ai
source-diff obfuscated-file:src/sap/fe/templates/TableScroller.js AI (source-diff): Babel-transpiled SAPUI5 AMD module with SAP copyright; long lines are transpiler artifacts. ai
source-diff obfuscated-file:src/sap/fe/templates/ObjectPage/overrides/Share.js AI (source-diff): Babel-transpiled SAPUI5 AMD module with SAP copyright; long lines are transpiler artifacts. ai
source-diff obfuscated-file:src/sap/fe/templates/ObjectPage/templating/ObjectPageTemplating.js AI (source-diff): SAPUI5 libraries ship minified/bundled JS with long lines as standard distribution format; SAP copyright header confirms legitimacy. ai
publish-pattern dormant-publish AI (publish-pattern): SAP maintains multiple versioned branches of SAPUI5; older version publishes after gaps are expected for LTS/patch releases. ai
source-diff obfuscated-file:src/sap/fe/templates/types/sap.fe.templates-auto-ext.d.js AI (source-diff): Inline base64 source map in autogenerated SAPUI5 build artifact; not obfuscation. ai
source-diff obfuscated-file:src/sap/fe/templates/ListReport/view/fragments/MultipleMode.fragment.js AI (source-diff): Babel-transpiled SAPUI5 module with SAP copyright; standard transpilation output. ai
source-diff obfuscated-file:src/sap/fe/templates/Feedback.js AI (source-diff): Babel-transpiled SAPUI5 module with SAP copyright; standard transpilation output. ai
source-diff obfuscated-file:src/sap/fe/templates/ObjectPage/components/DraftHandlerButton.js AI (source-diff): Babel-transpiled SAPUI5 module with SAP copyright; long lines are inlined helper functions, not malicious obfuscation. ai
source-diff obfuscated-file:src/sap/fe/templates/ObjectPage/card/MetaPath.js AI (source-diff): Readable SAPUI5 AMD module with JSDoc comments; long-line flag is a false positive for this package. ai
source-diff obfuscated-file:src/sap/fe/templates/ObjectPage/components/CollaborationDraft.block.js AI (source-diff): Standard SAPUI5 Babel-transpiled AMD bundle with SAP copyright; long lines are decorator transforms, not malicious obfuscation. ai
source-diff obfuscated-file:src/sap/fe/templates/ObjectPage/view/fragments/FooterContent.block.js AI (source-diff): Same SAPUI5 transpiled bundle pattern; SAP copyright header present, no malicious indicators. ai
source-diff obfuscated-file:src/sap/fe/templates/ObjectPage/components/DraftHandlerButton.block.js AI (source-diff): Same SAPUI5 transpiled bundle pattern; SAP copyright header present, no malicious indicators. ai

Versions (showing 100 of 144)

Version Deps Published
1.148.1 0 / 0
1.148.0 0 / 0
1.147.0 0 / 0
1.146.0 0 / 0
1.145.3 0 / 0
1.145.2 0 / 0
1.145.1 0 / 0
1.144.0 0 / 0
1.143.0 0 / 0
1.142.11 0 / 0
1.142.10 0 / 0
1.142.9 0 / 0
1.142.8 0 / 0
1.142.7 0 / 0
1.142.6 0 / 0
1.142.5 0 / 0
1.142.3 0 / 0
1.142.2 0 / 0
1.142.1 0 / 0
1.141.2 0 / 0
1.139.4 0 / 0
1.136.18 0 / 0
1.136.17 0 / 0
1.136.16 0 / 0
1.136.15 0 / 0
1.136.13 0 / 0
1.136.12 0 / 0
1.136.11 0 / 0
1.136.10 0 / 0
1.136.6 0 / 0
1.136.5 0 / 0
1.136.0 0 / 0
1.135.0 0 / 0
1.134.0 0 / 0
1.133.4 0 / 0
1.133.3 0 / 0
1.133.2 0 / 0
1.133.1 0 / 0
1.133.0 0 / 0
1.132.0 0 / 0
1.131.0 0 / 0
1.130.11 0 / 0
1.130.10 0 / 0
1.130.9 0 / 0
1.130.8 0 / 0
1.130.6 0 / 0
1.130.5 0 / 0
1.130.4 0 / 0
1.130.3 0 / 0
1.130.1 0 / 0
1.130.0 0 / 0
1.129.1 0 / 0
1.129.0 0 / 0
1.128.0 0 / 0
1.127.6 0 / 0
1.127.5 0 / 0
1.127.4 0 / 0
1.127.3 0 / 0
1.127.2 0 / 0
1.127.1 0 / 0
1.127.0 0 / 0
1.126.2 0 / 0
1.126.1 0 / 0
1.126.0 0 / 0
1.125.0 0 / 0
1.124.9 0 / 0
1.124.8 0 / 0
1.124.7 0 / 0
1.124.6 0 / 0
1.124.5 0 / 0
1.124.4 0 / 0
1.124.3 0 / 0
1.124.2 0 / 0
1.124.1 0 / 0
1.124.0 0 / 0
1.123.1 0 / 0
1.121.6 0 / 0
1.121.4 0 / 0
1.120.40 0 / 0
1.120.39 0 / 0
1.120.38 0 / 0
1.120.37 0 / 0
1.120.36 0 / 0
1.120.35 0 / 0
1.120.34 0 / 0
1.120.33 0 / 0
1.120.32 0 / 0
1.120.31 0 / 0
1.120.29 0 / 0
1.120.28 0 / 0
1.120.27 0 / 0
1.120.26 0 / 0
1.120.25 0 / 0
1.120.24 0 / 0
1.120.23 0 / 0
1.120.22 0 / 0
1.120.21 0 / 0
1.120.20 0 / 0
1.120.19 0 / 0
1.120.18 0 / 0
Showing 100 of 144 Next page →

v1.135.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.134.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.133.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.133.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.132.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.131.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.130.9

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.130.8

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.130.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.130.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.130.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.130.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.130.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.130.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.129.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.129.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.128.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.127.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.127.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.127.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.127.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.127.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.127.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.127.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.126.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.126.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.126.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.125.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.124.9

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.124.8

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.124.7

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.124.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.124.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.124.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.124.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.124.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.124.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.124.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.123.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.121.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.121.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.120.40

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v1.120.23

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.120.22

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.120.21

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.120.20

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.120.19

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v1.120.18

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.