@sapui5/sap.fe.templates
SAPUI5 Library sap.fe.templates
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:src/sap/fe/templates/ObjectPage/designtime/ObjectPage.designtime.js | AI (source-diff): SAP UI5 transpiled build artifact; standard framework patterns. | ai | |
| source-diff | obfuscated-file:src/sap/fe/templates/ObjectPage/view/fragments/TransportSelection.js | AI (source-diff): SAP UI5 transpiled build artifact; standard framework patterns. | ai | |
| source-diff | obfuscated-file:src/sap/fe/templates/ObjectPage/flexibility/StashControlAndDisconnect.js | AI (source-diff): SAP UI5 transpiled build artifact; standard framework patterns. | ai | |
| source-diff | obfuscated-file:src/sap/fe/templates/ListReport/overrides/SideEffects.js | AI (source-diff): SAP UI5 transpiled build artifact; standard framework patterns. | ai | |
| source-diff | obfuscated-file:src/sap/fe/templates/ObjectPage/components/CollaborationDraft.js | AI (source-diff): SAP UI5 transpiled build artifact; standard framework patterns. | ai | |
| source-diff | obfuscated-file:src/sap/fe/templates/ObjectPage/overrides/CollaborationManager.js | AI (source-diff): SAP UI5 transpiled build artifact; standard framework patterns. | ai | |
| source-diff | obfuscated-file:src/sap/fe/templates/ObjectPage/components/DraftToggle.js | AI (source-diff): SAP UI5 transpiled build artifact; standard framework patterns. | ai | |
| source-diff | obfuscated-file:src/sap/fe/templates/ListReport/designtime/ListReport.designtime.helper.js | AI (source-diff): SAP UI5 transpiled build artifact; standard framework patterns. | ai | |
| source-diff | obfuscated-file:src/sap/fe/templates/ListReport/designtime/ListReport.designtime.js | AI (source-diff): SAP UI5 transpiled build artifact; standard framework patterns. | ai | |
| source-diff | obfuscated-file:src/sap/fe/templates/ObjectPage/designtime/ObjectPage.designtime.helper.js | AI (source-diff): SAP UI5 transpiled build artifact; standard framework patterns. | ai | |
| source-diff | obfuscated-file:src/sap/fe/templates/ObjectPage/components/CollaborationDiscardDialog.js | AI (source-diff): SAP UI5 transpiled build output; readable collaboration dialog logic, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:src/sap/fe/templates/ObjectPage/card/BaseCardContentProvider.js | AI (source-diff): SAP UI5 transpiled build output; readable class structure, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:src/sap/fe/templates/ObjectPage/card/AdaptiveCardContent.js | AI (source-diff): SAP UI5 transpiled build output; sap.ui.define wrapper with readable JSDoc — not malicious obfuscation. | ai | |
| source-diff | source-size-tripled | AI (source-diff): Size increase attributable to new feature modules (Adaptive Cards, Collaboration); no injected payload indicators. | ai | |
| source-diff | large-new-source-files | AI (source-diff): New Adaptive Cards and Collaboration Draft feature modules; legitimate feature addition from SAP. | ai | |
| source-diff | obfuscated-file:src/sap/fe/templates/ListReport/view/fragments/MultipleMode.block.js | AI (source-diff): SAP UI5 transpiled build output; consistent with package distribution pattern. | ai | |
| source-diff | obfuscated-file:src/sap/fe/templates/ListReport/LRMessageStrip.js | AI (source-diff): SAP UI5 transpiled build output; consistent with package distribution pattern. | ai | |
| source-diff | obfuscated-file:src/sap/fe/templates/ObjectPage/card/facets/HeaderTitle.js | AI (source-diff): SAP UI5 transpiled build output; readable header title facet, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:src/sap/fe/templates/ObjectPage/card/facets/HeaderContent.js | AI (source-diff): SAP UI5 transpiled build output; readable header content facet, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:src/sap/fe/templates/ObjectPage/card/actions/HeaderActions.js | AI (source-diff): SAP UI5 transpiled build output; readable header actions logic, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:src/sap/fe/templates/ObjectPage/card/Generator.js | AI (source-diff): SAP UI5 transpiled build output; readable adaptive card generator, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:src/sap/fe/templates/ObjectPage/ExtendPageDefinition.js | AI (source-diff): SAP UI5 transpiled build output; readable page definition logic, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:src/sap/fe/templates/ObjectPage/view/fragments/TransportSelection.block.js | AI (source-diff): SAP-copyrighted SAPUI5 bundled module; long-line format is standard for SAP's UI5 build output. | ai | |
| source-diff | obfuscated-file:src/sap/fe/templates/ObjectPage/helpers/SectionNavigationHelper.js | AI (source-diff): SAP UI5 build output with copyright header and readable logic; long lines from minification are normal for this package family. | ai | |
| source-diff | obfuscated-file:src/sap/fe/templates/ListReport/controls/MultipleModeControl.js | AI (source-diff): Babel-transpiled SAPUI5 AMD module with SAP copyright; long lines are transpiler artifacts, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:src/sap/fe/templates/ListReport/overrides/Share.js | AI (source-diff): Babel-transpiled SAPUI5 AMD module with SAP copyright; long lines are transpiler artifacts. | ai | |
| source-diff | obfuscated-file:src/sap/fe/templates/ObjectPage/ObjectPageTemplating.js | AI (source-diff): Babel-transpiled SAPUI5 AMD module with SAP copyright; long lines are transpiler artifacts. | ai | |
| source-diff | obfuscated-file:src/sap/fe/templates/TableScroller.js | AI (source-diff): Babel-transpiled SAPUI5 AMD module with SAP copyright; long lines are transpiler artifacts. | ai | |
| source-diff | obfuscated-file:src/sap/fe/templates/ObjectPage/overrides/Share.js | AI (source-diff): Babel-transpiled SAPUI5 AMD module with SAP copyright; long lines are transpiler artifacts. | ai | |
| source-diff | obfuscated-file:src/sap/fe/templates/ObjectPage/templating/ObjectPageTemplating.js | AI (source-diff): SAPUI5 libraries ship minified/bundled JS with long lines as standard distribution format; SAP copyright header confirms legitimacy. | ai | |
| publish-pattern | dormant-publish | AI (publish-pattern): SAP maintains multiple versioned branches of SAPUI5; older version publishes after gaps are expected for LTS/patch releases. | ai | |
| source-diff | obfuscated-file:src/sap/fe/templates/types/sap.fe.templates-auto-ext.d.js | AI (source-diff): Inline base64 source map in autogenerated SAPUI5 build artifact; not obfuscation. | ai | |
| source-diff | obfuscated-file:src/sap/fe/templates/ListReport/view/fragments/MultipleMode.fragment.js | AI (source-diff): Babel-transpiled SAPUI5 module with SAP copyright; standard transpilation output. | ai | |
| source-diff | obfuscated-file:src/sap/fe/templates/Feedback.js | AI (source-diff): Babel-transpiled SAPUI5 module with SAP copyright; standard transpilation output. | ai | |
| source-diff | obfuscated-file:src/sap/fe/templates/ObjectPage/components/DraftHandlerButton.js | AI (source-diff): Babel-transpiled SAPUI5 module with SAP copyright; long lines are inlined helper functions, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:src/sap/fe/templates/ObjectPage/card/MetaPath.js | AI (source-diff): Readable SAPUI5 AMD module with JSDoc comments; long-line flag is a false positive for this package. | ai | |
| source-diff | obfuscated-file:src/sap/fe/templates/ObjectPage/components/CollaborationDraft.block.js | AI (source-diff): Standard SAPUI5 Babel-transpiled AMD bundle with SAP copyright; long lines are decorator transforms, not malicious obfuscation. | ai | |
| source-diff | obfuscated-file:src/sap/fe/templates/ObjectPage/view/fragments/FooterContent.block.js | AI (source-diff): Same SAPUI5 transpiled bundle pattern; SAP copyright header present, no malicious indicators. | ai | |
| source-diff | obfuscated-file:src/sap/fe/templates/ObjectPage/components/DraftHandlerButton.block.js | AI (source-diff): Same SAPUI5 transpiled bundle pattern; SAP copyright header present, no malicious indicators. | ai |
Versions (showing 44 of 144)
| Version | Deps | Published |
|---|---|---|
| 1.120.17 | 0 / 0 | |
| 1.120.16 | 0 / 0 | |
| 1.120.15 | 0 / 0 | |
| 1.120.14 | 0 / 0 | |
| 1.120.13 | 0 / 0 | |
| 1.120.12 | 0 / 0 | |
| 1.120.11 | 0 / 0 | |
| 1.120.10 | 0 / 0 | |
| 1.108.41 | 0 / 6 | |
| 1.108.40 | 0 / 6 | |
| 1.108.39 | 0 / 6 | |
| 1.108.38 | 0 / 6 | |
| 1.108.37 | 0 / 6 | |
| 1.108.36 | 0 / 6 | |
| 1.108.35 | 0 / 6 | |
| 1.108.34 | 0 / 6 | |
| 1.108.33 | 0 / 6 | |
| 1.108.32 | 0 / 6 | |
| 1.108.31 | 0 / 6 | |
| 1.108.30 | 0 / 6 | |
| 1.108.29 | 0 / 6 | |
| 1.108.28 | 0 / 6 | |
| 1.108.27 | 0 / 6 | |
| 1.108.26 | 0 / 6 | |
| 1.108.25 | 0 / 6 | |
| 1.108.24 | 0 / 6 | |
| 1.108.23 | 0 / 6 | |
| 1.96.35 | 0 / 2 | |
| 1.96.34 | 0 / 2 | |
| 1.96.33 | 0 / 2 | |
| 1.96.32 | 0 / 2 | |
| 1.96.31 | 0 / 2 | |
| 1.96.30 | 0 / 2 | |
| 1.96.29 | 0 / 2 | |
| 1.96.28 | 0 / 2 | |
| 1.96.27 | 0 / 2 | |
| 1.96.26 | 0 / 2 | |
| 1.84.24 | 0 / 3 | |
| 1.84.23 | 0 / 3 | |
| 1.84.22 | 0 / 3 | |
| 1.84.21 | 0 / 3 | |
| 1.84.20 | 0 / 3 | |
| 1.84.19 | 0 / 3 | |
| 1.84.17 | 0 / 3 |
v1.120.17
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.120.16
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.120.15
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.120.14
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.120.13
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.120.12
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.120.11
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.120.10
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.108.30
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.108.29
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.108.28
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.108.27
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.108.26
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.108.25
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.108.24
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.108.23
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.96.28
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.96.27
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.96.26
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.84.20
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.84.19
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v1.84.17
1 findingPackage was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.