All @univerjs-pro/sheets-chart versions

@univerjs-pro/[email protected] rejected Risk: 100 No license

@univerjs-pro/sheets-chart @0.21.0

rejected
This version was rejected. It did not pass GreenFlagged's security review and is not served by the registry. The findings and risk dispositions below explain why.
npm Repository Homepage Tarball
100
Risk Score
—
License
No
Install Scripts
6
Dependencies
5
Dev Dependencies
106.5 KB
Package Size
Published

Chart library for Univer.

Maintainers

jikkaihexf00mengshukejiwendellhu95

Keywords

univer

Dependencies (6)

PackageConstraintRegistry Status
@univerjs/core 0.21.0 auto_approved
@univerjs/sheets 0.21.0 auto_approved
@univerjs-pro/license 0.21.0 auto_approved
@univerjs/engine-formula 0.21.0 auto_approved
@univerjs/sheets-drawing 0.21.0 auto_approved
@univerjs-pro/engine-chart 0.21.0 auto_approved

Dev Dependencies (5)

PackageConstraintRegistry Status
rxjs 7.8.2 auto_approved
vitest ^4.1.4 auto_approved
typescript ^6.0.3 auto_approved
@univerjs/drawing 0.21.0 pending
@univerjs-infra/shared 0.21.0 Not imported

Transitive Dependency Tree

65 transitive deps max depth 10
  ├─ @univerjs-pro/engine-chart 0.21.0
  ├─ @univerjs-pro/license 0.21.0 → 0.21.0
  ├─ @univerjs/core 0.21.0 → 0.21.0
  ├─ @univerjs/engine-formula 0.21.0 → 0.21.0
  ├─ @univerjs/sheets 0.21.0 → 0.21.0
├─ @univerjs/sheets-drawing 0.21.0 → 0.21.0
  ├─ @flatten-js/interval-tree 1.1.3
  ├─ @noble/ed25519 2.3.0 → 2.3.0
  ├─ @noble/hashes 1.8.0 → 1.8.0
  ├─ @univerjs/core 0.21.0 → 0.21.0
  ├─ @univerjs/drawing 0.21.0
  ├─ @univerjs/engine-formula 0.21.0 → 0.21.0
  ├─ @univerjs/engine-render 0.21.0 → 0.21.0
  ├─ @univerjs/protocol 0.21.0 → 0.21.0
  ├─ @univerjs/rpc 0.21.0 → 0.21.0
  ├─ @univerjs/sheets 0.21.0 → 0.21.0
  ├─ @univerjs/themes 0.21.0 → 0.21.0
  ├─ @wendellhu/redi 1.1.1 → 1.1.1
  ├─ async-lock ^1.4.1 → 1.4.1
  ├─ decimal.js ^10.6.0 → 10.6.0
  ├─ fast-diff 1.3.0 → 1.3.0
  ├─ kdbush ^4.0.2 → 4.0.2
  ├─ lodash-es ^4.18.1 → 4.18.1
  ├─ nanoid 5.1.9 → 5.1.9
  ├─ numfmt 3.2.6 → 3.2.6
  ├─ ot-json1 ^1.0.2 → 1.0.2
├─ rbush ^4.0.1 → 4.0.1
  ├─ @flatten-js/interval-tree 1.1.3
  ├─ @floating-ui/dom ^1.7.4 → 1.7.6
  ├─ @floating-ui/utils ^0.2.10 → 0.2.11
  ├─ @grpc/grpc-js ^1.14.3 → 1.14.3
  ├─ @univerjs/core 0.21.0 → 0.21.0
  ├─ @univerjs/engine-formula 0.21.0 → 0.21.0
  ├─ @univerjs/engine-render 0.21.0 → 0.21.0
  ├─ @univerjs/protocol 0.21.0 → 0.21.0
  ├─ @univerjs/rpc 0.21.0 → 0.21.0
  ├─ @univerjs/themes 0.21.0 → 0.21.0
  ├─ @wendellhu/redi 1.1.1 → 1.1.1
  ├─ async-lock ^1.4.1 → 1.4.1
  ├─ cjk-regex ^3.4.0 → 3.4.0
  ├─ decimal.js ^10.6.0 → 10.6.0
  ├─ fast-diff 1.3.0 → 1.3.0
  ├─ franc-min ^6.2.0 → 6.2.0
  ├─ kdbush ^4.0.2 → 4.0.2
  ├─ lodash-es ^4.18.1 → 4.18.1
  ├─ nanoid 5.1.9 → 5.1.9
  ├─ numfmt 3.2.6 → 3.2.6
  ├─ opentype.js ^1.3.4 → 1.3.4
  ├─ ot-json1 ^1.0.2 → 1.0.2
├─ rbush ^4.0.1 → 4.0.1
  ├─ @flatten-js/interval-tree 1.1.3
  ├─ @floating-ui/core ^1.7.5 → 1.7.5
  ├─ @floating-ui/dom ^1.7.4 → 1.7.6
  ├─ @floating-ui/utils ^0.2.10 → 0.2.11
  ├─ @floating-ui/utils ^0.2.11 → 0.2.11
  ├─ @grpc/grpc-js ^1.14.3 → 1.14.3
  ├─ @grpc/proto-loader ^0.8.0 → 0.8.0
  ├─ @js-sdsl/ordered-map ^4.4.2 → 4.4.2
  ├─ @univerjs/core 0.21.0 → 0.21.0
  ├─ @univerjs/protocol 0.21.0 → 0.21.0
  ├─ @univerjs/rpc 0.21.0 → 0.21.0
  ├─ @univerjs/themes 0.21.0 → 0.21.0
  ├─ @wendellhu/redi 1.1.1 → 1.1.1
  ├─ async-lock ^1.4.1 → 1.4.1
  ├─ cjk-regex ^3.4.0 → 3.4.0
  ├─ decimal.js ^10.6.0 → 10.6.0
  ├─ fast-diff 1.3.0 → 1.3.0
  ├─ franc-min ^6.2.0 → 6.2.0
  ├─ kdbush ^4.0.2 → 4.0.2
  ├─ lodash-es ^4.18.1 → 4.18.1
  ├─ nanoid 5.1.9 → 5.1.9
  ├─ numfmt 3.2.6 → 3.2.6
  ├─ opentype.js ^1.3.4 → 1.3.4
  ├─ ot-json1 ^1.0.2 → 1.0.2
  ├─ rbush ^4.0.1 → 4.0.1
  ├─ string.prototype.codepointat ^0.2.1
├─ tiny-inflate ^1.0.3 → 1.0.3
  ├─ @floating-ui/core ^1.7.5 → 1.7.5
  ├─ @floating-ui/utils ^0.2.11 → 0.2.11
  ├─ @grpc/grpc-js ^1.14.3 → 1.14.3
  ├─ @grpc/proto-loader ^0.8.0 → 0.8.0
  ├─ @js-sdsl/ordered-map ^4.4.2 → 4.4.2
  ├─ @univerjs/core 0.21.0 → 0.21.0
  ├─ @univerjs/protocol 0.21.0 → 0.21.0
  ├─ @univerjs/themes 0.21.0 → 0.21.0
  ├─ @wendellhu/redi 1.1.1 → 1.1.1
  ├─ async-lock ^1.4.1 → 1.4.1
  ├─ fast-diff 1.3.0 → 1.3.0
  ├─ kdbush ^4.0.2 → 4.0.2
  ├─ lodash-es ^4.18.1 → 4.18.1
  ├─ lodash.camelcase ^4.3.0 → 4.3.0
  ├─ long ^5.0.0 → 5.3.2
  ├─ nanoid 5.1.9 → 5.1.9
  ├─ numfmt 3.2.6 → 3.2.6
  ├─ ot-json1 ^1.0.2 → 1.0.2
  ├─ protobufjs ^7.5.3 → 7.5.6
  ├─ rbush ^4.0.1 → 4.0.1
  ├─ string.prototype.codepointat ^0.2.1
  ├─ tiny-inflate ^1.0.3 → 1.0.3
├─ yargs ^17.7.2 → 17.7.2
  ├─ @floating-ui/utils ^0.2.11 → 0.2.11
  ├─ @grpc/grpc-js ^1.14.3 → 1.14.3
  ├─ @grpc/proto-loader ^0.8.0 → 0.8.0
  ├─ @js-sdsl/ordered-map ^4.4.2 → 4.4.2
  ├─ @protobufjs/aspromise ^1.1.2 → 1.1.2
  ├─ @protobufjs/base64 ^1.1.2 → 1.1.2
  ├─ @protobufjs/codegen ^2.0.5 → 2.0.5
  ├─ @protobufjs/eventemitter ^1.1.0 → 1.1.0
  ├─ @protobufjs/fetch ^1.1.0 → 1.1.0
  ├─ @protobufjs/float ^1.0.2 → 1.0.2
  ├─ @protobufjs/inquire ^1.1.1 → 1.1.1
  ├─ @protobufjs/path ^1.1.2 → 1.1.2
  ├─ @protobufjs/pool ^1.1.0 → 1.1.0
  ├─ @protobufjs/utf8 ^1.1.1 → 1.1.1
  ├─ @types/node >=13.7.0 → 25.6.0
  ├─ @univerjs/protocol 0.21.0 → 0.21.0
  ├─ @univerjs/themes 0.21.0 → 0.21.0
  ├─ @wendellhu/redi 1.1.1 → 1.1.1
  ├─ async-lock ^1.4.1 → 1.4.1
  ├─ cliui ^8.0.1 → 8.0.1
  ├─ escalade ^3.1.1 → 3.2.0
  ├─ fast-diff 1.3.0 → 1.3.0
  ├─ get-caller-file ^2.0.5 → 2.0.5
  ├─ kdbush ^4.0.2 → 4.0.2
  ├─ lodash-es ^4.18.1 → 4.18.1
  ├─ lodash.camelcase ^4.3.0 → 4.3.0
  ├─ long ^5.0.0 → 5.3.2
  ├─ nanoid 5.1.9 → 5.1.9
  ├─ numfmt 3.2.6 → 3.2.6
  ├─ ot-json1 ^1.0.2 → 1.0.2
  ├─ protobufjs ^7.5.3 → 7.5.6
  ├─ rbush ^4.0.1 → 4.0.1
  ├─ require-directory ^2.1.1 → 2.1.1
  ├─ string-width ^4.2.3 → 4.2.3
  ├─ y18n ^5.0.5 → 5.0.8
  ├─ yargs ^17.7.2 → 17.7.2
├─ yargs-parser ^21.1.1 → 21.1.1
  ├─ @grpc/grpc-js ^1.14.3 → 1.14.3
  ├─ @grpc/proto-loader ^0.8.0 → 0.8.0
  ├─ @js-sdsl/ordered-map ^4.4.2 → 4.4.2
  ├─ @protobufjs/aspromise ^1.1.1 → 1.1.2
  ├─ @protobufjs/aspromise ^1.1.2 → 1.1.2
  ├─ @protobufjs/base64 ^1.1.2 → 1.1.2
  ├─ @protobufjs/codegen ^2.0.5 → 2.0.5
  ├─ @protobufjs/eventemitter ^1.1.0 → 1.1.0
  ├─ @protobufjs/fetch ^1.1.0 → 1.1.0
  ├─ @protobufjs/float ^1.0.2 → 1.0.2
  ├─ @protobufjs/inquire ^1.1.1 → 1.1.1
  ├─ @protobufjs/inquire ^1.1.0 → 1.1.1
  ├─ @protobufjs/path ^1.1.2 → 1.1.2
  ├─ @protobufjs/pool ^1.1.0 → 1.1.0
  ├─ @protobufjs/utf8 ^1.1.1 → 1.1.1
  ├─ @types/node >=13.7.0 → 25.6.0
  ├─ cliui ^8.0.1 → 8.0.1
  ├─ emoji-regex ^8.0.0
  ├─ escalade ^3.1.1 → 3.2.0
  ├─ get-caller-file ^2.0.5 → 2.0.5
  ├─ is-fullwidth-code-point ^3.0.0
  ├─ lodash.camelcase ^4.3.0 → 4.3.0
  ├─ long ^5.0.0 → 5.3.2
  ├─ protobufjs ^7.5.3 → 7.5.6
  ├─ require-directory ^2.1.1 → 2.1.1
  ├─ string-width ^4.2.3 → 4.2.3
  ├─ string-width ^4.2.0 → 4.2.3
  ├─ strip-ansi ^6.0.1 → 6.0.1
  ├─ undici-types ~7.19.0 → 7.19.2
  ├─ wrap-ansi ^7.0.0 → 7.0.0
  ├─ y18n ^5.0.5 → 5.0.8
  ├─ yargs ^17.7.2 → 17.7.2
├─ yargs-parser ^21.1.1 → 21.1.1
  ├─ @grpc/proto-loader ^0.8.0 → 0.8.0
  ├─ @js-sdsl/ordered-map ^4.4.2 → 4.4.2
  ├─ @protobufjs/aspromise ^1.1.1 → 1.1.2
  ├─ @protobufjs/aspromise ^1.1.2 → 1.1.2
  ├─ @protobufjs/base64 ^1.1.2 → 1.1.2
  ├─ @protobufjs/codegen ^2.0.5 → 2.0.5
  ├─ @protobufjs/eventemitter ^1.1.0 → 1.1.0
  ├─ @protobufjs/fetch ^1.1.0 → 1.1.0
  ├─ @protobufjs/float ^1.0.2 → 1.0.2
  ├─ @protobufjs/inquire ^1.1.0 → 1.1.1
  ├─ @protobufjs/inquire ^1.1.1 → 1.1.1
  ├─ @protobufjs/path ^1.1.2 → 1.1.2
  ├─ @protobufjs/pool ^1.1.0 → 1.1.0
  ├─ @protobufjs/utf8 ^1.1.1 → 1.1.1
  ├─ @types/node >=13.7.0 → 25.6.0
  ├─ ansi-regex ^5.0.1 → 5.0.1
  ├─ ansi-styles ^4.0.0 → 4.3.0
  ├─ cliui ^8.0.1 → 8.0.1
  ├─ emoji-regex ^8.0.0
  ├─ escalade ^3.1.1 → 3.2.0
  ├─ get-caller-file ^2.0.5 → 2.0.5
  ├─ is-fullwidth-code-point ^3.0.0
  ├─ lodash.camelcase ^4.3.0 → 4.3.0
  ├─ long ^5.0.0 → 5.3.2
  ├─ protobufjs ^7.5.3 → 7.5.6
  ├─ require-directory ^2.1.1 → 2.1.1
  ├─ string-width ^4.1.0 → 4.2.3
  ├─ string-width ^4.2.0 → 4.2.3
  ├─ string-width ^4.2.3 → 4.2.3
  ├─ strip-ansi ^6.0.1 → 6.0.1
  ├─ strip-ansi ^6.0.0 → 6.0.1
  ├─ undici-types ~7.19.0 → 7.19.2
  ├─ wrap-ansi ^7.0.0 → 7.0.0
  ├─ y18n ^5.0.5 → 5.0.8
  ├─ yargs ^17.7.2 → 17.7.2
├─ yargs-parser ^21.1.1 → 21.1.1
  ├─ @protobufjs/aspromise ^1.1.1 → 1.1.2
  ├─ @protobufjs/aspromise ^1.1.2 → 1.1.2
  ├─ @protobufjs/base64 ^1.1.2 → 1.1.2
  ├─ @protobufjs/codegen ^2.0.5 → 2.0.5
  ├─ @protobufjs/eventemitter ^1.1.0 → 1.1.0
  ├─ @protobufjs/fetch ^1.1.0 → 1.1.0
  ├─ @protobufjs/float ^1.0.2 → 1.0.2
  ├─ @protobufjs/inquire ^1.1.1 → 1.1.1
  ├─ @protobufjs/inquire ^1.1.0 → 1.1.1
  ├─ @protobufjs/path ^1.1.2 → 1.1.2
  ├─ @protobufjs/pool ^1.1.0 → 1.1.0
  ├─ @protobufjs/utf8 ^1.1.1 → 1.1.1
  ├─ @types/node >=13.7.0 → 25.6.0
  ├─ ansi-regex ^5.0.1 → 5.0.1
  ├─ ansi-styles ^4.0.0 → 4.3.0
  ├─ cliui ^8.0.1 → 8.0.1
  ├─ color-convert ^2.0.1
  ├─ emoji-regex ^8.0.0
  ├─ escalade ^3.1.1 → 3.2.0
  ├─ get-caller-file ^2.0.5 → 2.0.5
  ├─ is-fullwidth-code-point ^3.0.0
  ├─ lodash.camelcase ^4.3.0 → 4.3.0
  ├─ long ^5.0.0 → 5.3.2
  ├─ protobufjs ^7.5.3 → 7.5.6
  ├─ require-directory ^2.1.1 → 2.1.1
  ├─ string-width ^4.2.3 → 4.2.3
  ├─ string-width ^4.1.0 → 4.2.3
  ├─ string-width ^4.2.0 → 4.2.3
  ├─ strip-ansi ^6.0.1 → 6.0.1
  ├─ strip-ansi ^6.0.0 → 6.0.1
  ├─ undici-types ~7.19.0 → 7.19.2
  ├─ wrap-ansi ^7.0.0 → 7.0.0
  ├─ y18n ^5.0.5 → 5.0.8
  ├─ yargs ^17.7.2 → 17.7.2
├─ yargs-parser ^21.1.1 → 21.1.1
  ├─ @protobufjs/aspromise ^1.1.2 → 1.1.2
  ├─ @protobufjs/aspromise ^1.1.1 → 1.1.2
  ├─ @protobufjs/base64 ^1.1.2 → 1.1.2
  ├─ @protobufjs/codegen ^2.0.5 → 2.0.5
  ├─ @protobufjs/eventemitter ^1.1.0 → 1.1.0
  ├─ @protobufjs/fetch ^1.1.0 → 1.1.0
  ├─ @protobufjs/float ^1.0.2 → 1.0.2
  ├─ @protobufjs/inquire ^1.1.0 → 1.1.1
  ├─ @protobufjs/inquire ^1.1.1 → 1.1.1
  ├─ @protobufjs/path ^1.1.2 → 1.1.2
  ├─ @protobufjs/pool ^1.1.0 → 1.1.0
  ├─ @protobufjs/utf8 ^1.1.1 → 1.1.1
  ├─ @types/node >=13.7.0 → 25.6.0
  ├─ ansi-regex ^5.0.1 → 5.0.1
  ├─ ansi-styles ^4.0.0 → 4.3.0
  ├─ cliui ^8.0.1 → 8.0.1
  ├─ color-convert ^2.0.1
  ├─ emoji-regex ^8.0.0
  ├─ escalade ^3.1.1 → 3.2.0
  ├─ get-caller-file ^2.0.5 → 2.0.5
  ├─ is-fullwidth-code-point ^3.0.0
  ├─ long ^5.0.0 → 5.3.2
  ├─ require-directory ^2.1.1 → 2.1.1
  ├─ string-width ^4.2.0 → 4.2.3
  ├─ string-width ^4.2.3 → 4.2.3
  ├─ string-width ^4.1.0 → 4.2.3
  ├─ strip-ansi ^6.0.0 → 6.0.1
  ├─ strip-ansi ^6.0.1 → 6.0.1
  ├─ undici-types ~7.19.0 → 7.19.2
  ├─ wrap-ansi ^7.0.0 → 7.0.0
  ├─ y18n ^5.0.5 → 5.0.8
  ├─ yargs-parser ^21.1.1 → 21.1.1

Changes from v0.20.0

Dependency Changes

ChangePackageVersion
changed @univerjs/core 0.20.0 → 0.21.0
changed @univerjs/sheets 0.20.0 → 0.21.0
changed @univerjs-pro/license 0.20.0 → 0.21.0
changed @univerjs/engine-formula 0.20.0 → 0.21.0
changed @univerjs/sheets-drawing 0.20.0 → 0.21.0
changed @univerjs-pro/engine-chart 0.20.0 → 0.21.0

File Changes

0 added 0 removed 57 modified size delta: +29.4 KB

Risk Dispositions (4 applicable to this version, 0 other)

Accepted rules are downgraded to INFO on future analyses; rejected rules escalate to CRITICAL.

Rule Source Disposition Author Reason
obfuscated-file:lib/cjs/facade.js source-diff reject AI AI (source-diff): Deliberately obfuscated facade file added in this version; not consistent with legitimate build output.
obfuscated-file:lib/es/facade.js source-diff reject AI AI (source-diff): Deliberately obfuscated facade file added in this version; not consistent with legitimate build output.
obfuscated-file:lib/facade.js source-diff reject AI AI (source-diff): Deliberately obfuscated facade file added in this version; not consistent with legitimate build output.
obfuscated-file:lib/umd/facade.js source-diff reject AI AI (source-diff): Deliberately obfuscated facade file added in this version; not consistent with legitimate build output.

SAST Findings (5)

HIGH New obfuscated file: lib/cjs/facade.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: lib/es/facade.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: lib/facade.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

HIGH New obfuscated file: lib/umd/facade.js source-diff

Newly added source file contains lines over 3000 chars, suggesting minified or obfuscated code. New obfuscated files are a strong attack indicator.

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

Review Summary

Risk score: 100 (capped from 123). Findings: 4 high (+100), 2 medium (+20), 1 low (+3), 186 info (+0).

Published to npm: