← Home

@univerjs/engine-formula

npm Repository Homepage

UniverSheet normal base-formula-engine

100
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

jikkaiwbfsamengshukeji

Keywords

univerformulaformula-enginecalculationspreadsheet

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
dependencies unvetted-dep:@univerjs/engine-numfmt AI (dependencies): Sibling package in same monorepo/version-locked release. ai
semgrep semgrep:new-function-constructor AI (semgrep): Bundled formula-parser code; dynamic eval is expected functionality, not injected behavior. ai
phantom-deps phantom-dep:big.js AI (phantom-deps): Used via config/build indirection; stable false positive. ai
phantom-deps phantom-dep:numfmt AI (phantom-deps): Used via config/build indirection; stable false positive. ai
phantom-deps phantom-dep:decimal.js AI (phantom-deps): decimal.js is a declared runtime dependency in package.json; phantom-dep is a false positive for this package. ai
dependencies unvetted-dep:@univerjs/core AI (dependencies): Internal sibling package from the same DreamNum/Univer monorepo; expected dependency pattern. ai
dependencies unvetted-dep:@univerjs/rpc AI (dependencies): Internal sibling package from the same DreamNum/Univer monorepo; expected dependency pattern. ai

Versions (showing 100 of 108)

Version Deps Published
0.25.1 4 / 4
0.25.0 4 / 4
0.24.0 4 / 4
0.23.0 4 / 4
0.22.1 4 / 4
0.22.0 4 / 4
0.21.1 4 / 4
0.21.0 4 / 4
0.20.1 4 / 4
0.20.0 4 / 4
0.19.0 4 / 4
0.18.0 4 / 4
0.17.0 4 / 5
0.16.1 4 / 5
0.16.0 4 / 5
0.15.5 4 / 5
0.15.4 4 / 5
0.15.3 4 / 5
0.15.2 4 / 5
0.15.1 4 / 5
0.15.0 4 / 5
0.14.0 4 / 5
0.13.0 4 / 5
0.12.4 4 / 5
0.12.3 4 / 5
0.12.2 4 / 5
0.12.1 4 / 5
0.12.0 4 / 5
0.11.0 4 / 5
0.10.14 4 / 5
0.10.13 4 / 5
0.10.12 4 / 5
0.10.11 4 / 5
0.10.10 4 / 5
0.10.9 4 / 5
0.10.8 4 / 5
0.10.7 4 / 5
0.10.6 4 / 5
0.10.5 4 / 5
0.10.4 4 / 5
0.10.3 4 / 5
0.10.2 4 / 5
0.10.1 4 / 5
0.10.0 4 / 5
0.9.4 4 / 5
0.9.3 4 / 5
0.9.2 5 / 5
0.9.1 5 / 5
0.9.0 5 / 5
0.8.3 5 / 5
0.8.2 5 / 5
0.8.1 5 / 5
0.8.0 5 / 5
0.7.0 6 / 5
0.6.10 6 / 5
0.6.9 6 / 5
0.6.8 6 / 5
0.6.7 6 / 5
0.6.6 6 / 5
0.6.5 6 / 5
0.6.4 6 / 5
0.6.3 6 / 5
0.6.2 6 / 5
0.6.1 6 / 5
0.6.0 6 / 5
0.5.5 5 / 5
0.5.4 5 / 5
0.5.3 5 / 5
0.5.2 5 / 5
0.5.1 5 / 5
0.5.0 5 / 5
0.4.2 5 / 5
0.4.1 4 / 5
0.4.0 4 / 5
0.3.0 4 / 5
0.2.15 4 / 5
0.2.14 4 / 5
0.2.13 4 / 5
0.2.12 2 / 7
0.2.11 2 / 7
0.2.10 2 / 7
0.2.9 1 / 7
0.2.8 1 / 7
0.2.7 2 / 8
0.2.6 2 / 8
0.2.5 2 / 8
0.2.4 2 / 9
0.2.3 2 / 9
0.2.2 2 / 9
0.2.1 2 / 9
0.2.0 2 / 9
0.1.17 2 / 9
0.1.16 2 / 9
0.1.15 2 / 9
0.1.14 2 / 9
0.1.13 2 / 8
0.1.12 2 / 8
0.1.11 2 / 8
0.1.10 2 / 8
0.1.9 2 / 8
Showing 100 of 108 Next page →

v0.25.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.8.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.10

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.9

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.8

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.7

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.6.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.5.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.5.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.5.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.5.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.5.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.5.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.4.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.4.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.4.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.3.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.15

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.14

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.13

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.12

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.11

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.10

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.9

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.8

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.7

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.6

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.5

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.4

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.3

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.2

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.2.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.1.17

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.1.16

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.1.15

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.1.14

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.1.13

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.1.12

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.1.11

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.1.10

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

v0.1.9

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.