← Home

@univerjs/design

npm Repository Homepage

UI component library for building exceptional Univer.

100
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

jikkaiwbfsamengshukeji

Keywords

univerdesign-systemuireactcomponents

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:rc-select AI (phantom-deps): Bundled lib output; rc-select is a normal UI dep for this design system. ai
phantom-deps phantom-dep:rc-input AI (phantom-deps): Bundled lib output; rc-input is a normal UI dep for this design system. ai
phantom-deps phantom-dep:@rc-component/color-picker AI (phantom-deps): Common UI lib, used indirectly by config; stable false positive. ai
phantom-deps phantom-dep:@types/react-mentions AI (phantom-deps): Type-only package, framework convention. ai
phantom-deps phantom-dep:react-draggable AI (phantom-deps): Common UI lib, used indirectly by config; stable false positive. ai
phantom-deps phantom-dep:rc-dialog AI (phantom-deps): Common UI lib, used indirectly by config; stable false positive. ai
dependencies unvetted-dep:@types/react-mentions AI (dependencies): Type-only dependency, no runtime risk. ai
phantom-deps phantom-dep:rc-input-number AI (phantom-deps): Common UI lib, used indirectly by config; stable false positive. ai
phantom-deps phantom-dep:rc-util AI (phantom-deps): Common UI lib, used indirectly by config; stable false positive. ai
source-diff obfuscated-file:lib/cjs/locale/es-ES.js AI (source-diff): Minified dayjs locale bundle; standard build output. ai
source-diff obfuscated-file:lib/umd/locale/es-ES.js AI (source-diff): UMD variant of same minified locale bundle. ai
source-diff obfuscated-file:lib/cjs/locale/ca-ES.js AI (source-diff): Minified dayjs locale bundle; standard build output for this UI library. ai
source-diff obfuscated-file:lib/umd/locale/ca-ES.js AI (source-diff): UMD variant of same minified locale bundle. ai
source-diff obfuscated-file:lib/umd/locale/ko-KR.js AI (source-diff): UMD variant of the same minified dayjs locale bundle. ai
source-diff obfuscated-file:lib/cjs/locale/ko-KR.js AI (source-diff): Minified dayjs ko-KR locale bundle; standard build output for this package. ai
dependencies unvetted-dep:@radix-ui/react-hover-card AI (dependencies): @radix-ui/react-hover-card is a well-known, widely-used Radix UI component; stable false positive for this package. ai
dependencies unvetted-dep:@univerjs/icons AI (dependencies): Same org scope (@univerjs); stable dependency across this package's many versions. ai
phantom-deps phantom-dep:rc-virtual-list AI (phantom-deps): Declared runtime dep; phantom-dep heuristic false positive for this package. ai
phantom-deps phantom-dep:dayjs AI (phantom-deps): dayjs is a declared runtime dep; phantom-dep heuristic fires on config-file references, not a real concern. ai
phantom-deps phantom-dep:tailwind-merge AI (phantom-deps): Used in config/build context for this UI library; stable false positive. ai
phantom-deps phantom-dep:react-transition-group AI (phantom-deps): Referenced in config files; stable false positive for this UI component library. ai
phantom-deps phantom-dep:@radix-ui/react-slot AI (phantom-deps): Referenced in config files; stable false positive for this UI component library. ai
phantom-deps phantom-dep:@univerjs/icons AI (phantom-deps): Same org scope; likely re-exported or used indirectly; stable false positive. ai

Versions (showing 100 of 108)

Version Deps Published
0.25.1 13 / 11
0.25.0 13 / 11
0.24.0 13 / 11
0.23.0 13 / 11
0.22.1 12 / 11
0.22.0 12 / 11
0.21.1 12 / 11
0.21.0 12 / 11
0.20.1 12 / 11
0.20.0 13 / 11
0.19.0 13 / 11
0.18.0 13 / 11
0.17.0 15 / 13
0.16.1 18 / 14
0.16.0 18 / 14
0.15.5 18 / 14
0.15.4 18 / 14
0.15.3 18 / 14
0.15.2 18 / 14
0.15.1 18 / 14
0.15.0 18 / 14
0.14.0 18 / 14
0.13.0 18 / 14
0.12.4 18 / 14
0.12.3 18 / 14
0.12.2 18 / 14
0.12.1 18 / 14
0.12.0 18 / 14
0.11.0 18 / 14
0.10.14 18 / 14
0.10.13 18 / 14
0.10.12 18 / 14
0.10.11 18 / 14
0.10.10 18 / 14
0.10.9 18 / 14
0.10.8 18 / 14
0.10.7 18 / 14
0.10.6 19 / 14
0.10.5 19 / 14
0.10.4 19 / 14
0.10.3 19 / 14
0.10.2 20 / 14
0.10.1 21 / 14
0.10.0 21 / 14
0.9.4 21 / 13
0.9.3 21 / 13
0.9.2 21 / 13
0.9.1 21 / 13
0.9.0 21 / 13
0.8.3 21 / 13
0.8.2 21 / 13
0.8.1 21 / 13
0.8.0 21 / 13
0.7.0 20 / 13
0.6.10 20 / 14
0.6.9 19 / 14
0.6.8 19 / 14
0.6.7 19 / 14
0.6.6 19 / 14
0.6.5 19 / 14
0.6.4 19 / 14
0.6.3 18 / 14
0.6.2 18 / 14
0.6.1 20 / 14
0.6.0 20 / 14
0.5.5 20 / 14
0.5.4 22 / 14
0.5.3 23 / 13
0.5.2 23 / 13
0.5.1 22 / 13
0.5.0 22 / 11
0.4.2 21 / 12
0.4.1 21 / 12
0.4.0 21 / 12
0.3.0 21 / 12
0.2.15 21 / 12
0.2.14 21 / 12
0.2.13 21 / 12
0.2.12 19 / 14
0.2.11 19 / 14
0.2.10 19 / 14
0.2.9 19 / 14
0.2.8 19 / 14
0.2.7 19 / 14
0.2.6 19 / 14
0.2.5 19 / 14
0.2.4 19 / 14
0.2.3 19 / 14
0.2.2 19 / 14
0.2.1 19 / 14
0.2.0 19 / 14
0.1.17 19 / 14
0.1.16 19 / 14
0.1.15 19 / 14
0.1.14 19 / 14
0.1.13 19 / 14
0.1.12 19 / 14
0.1.11 17 / 14
0.1.10 17 / 14
0.1.9 17 / 14
Showing 100 of 108 Next page →

v0.25.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.6.10

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.9

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.8

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.7

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.5.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.5.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.5.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.5.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.5.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.5.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.4.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.4.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.4.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.3.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.15

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.14

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.13

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.12

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.11

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.10

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.9

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.8

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.7

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.1.17

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.1.16

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.1.15

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.1.14

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.1.13

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.1.12

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.1.11

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.1.10

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.1.9

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.