@univerjs/sheets
UniverSheet normal base-sheets
51
Versions
Apache-2.0
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
No source commit
Maintainers
jikkaiwbfsamengshukeji
Keywords
universheetsspreadsheetworkbookplugin
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| source-diff | obfuscated-file:lib/umd/locale/de-DE.js | AI (source-diff): UMD-bundled locale translation file; long lines are normal for single-line bundles of i18n strings. | ai | |
| source-diff | obfuscated-file:lib/umd/locale/pt-BR.js | AI (source-diff): UMD-bundled locale translation file; long lines are normal for single-line bundles of i18n strings. | ai | |
| source-diff | obfuscated-file:lib/umd/locale/it-IT.js | AI (source-diff): UMD-bundled locale translation file; long lines are normal for single-line bundles of i18n strings. | ai | |
| source-diff | obfuscated-file:lib/umd/locale/id-ID.js | AI (source-diff): UMD-bundled locale translation file; long lines are normal for single-line bundles of i18n strings. | ai | |
| dependencies | unvetted-dep:@univerjs/engine-numfmt | AI (dependencies): Sibling package in the same @univerjs monorepo; consistently co-versioned and published by the same org. | ai | |
| dependencies | unvetted-dep:@univerjs/rpc | AI (dependencies): Internal sibling dep from same DreamNum/univer monorepo; not a security risk. | ai | |
| dependencies | unvetted-dep:@univerjs/engine-formula | AI (dependencies): Internal sibling dep from same DreamNum/univer monorepo; not a security risk. | ai | |
| dependencies | unvetted-dep:@univerjs/engine-render | AI (dependencies): Internal sibling dep from same DreamNum/univer monorepo; not a security risk. | ai | |
| dependencies | unvetted-dep:@univerjs/core | AI (dependencies): Internal sibling dep from same DreamNum/univer monorepo; not a security risk. | ai |
Versions (showing 51 of 108)
| Version | Deps | Published |
|---|---|---|
| 0.25.1 | 5 / 5 | |
| 0.25.0 | 5 / 5 | |
| 0.24.0 | 5 / 5 | |
| 0.23.0 | 5 / 5 | |
| 0.22.1 | 5 / 5 | |
| 0.22.0 | 5 / 5 | |
| 0.21.1 | 5 / 5 | |
| 0.21.0 | 5 / 5 | |
| 0.20.1 | 5 / 5 | |
| 0.20.0 | 5 / 5 | |
| 0.19.0 | 4 / 6 | |
| 0.18.0 | 4 / 6 | |
| 0.17.0 | 4 / 7 | |
| 0.16.1 | 4 / 7 | |
| 0.16.0 | 4 / 7 | |
| 0.15.5 | 4 / 7 | |
| 0.15.4 | 4 / 7 | |
| 0.15.3 | 4 / 7 | |
| 0.15.2 | 4 / 7 | |
| 0.15.1 | 4 / 7 | |
| 0.15.0 | 4 / 7 | |
| 0.14.0 | 4 / 7 | |
| 0.13.0 | 4 / 7 | |
| 0.12.4 | 4 / 7 | |
| 0.12.3 | 4 / 7 | |
| 0.12.2 | 4 / 7 | |
| 0.12.1 | 4 / 7 | |
| 0.12.0 | 4 / 7 | |
| 0.11.0 | 4 / 7 | |
| 0.10.14 | 4 / 7 | |
| 0.10.13 | 4 / 7 | |
| 0.10.12 | 4 / 7 | |
| 0.10.11 | 4 / 7 | |
| 0.10.10 | 4 / 7 | |
| 0.10.9 | 4 / 7 | |
| 0.10.8 | 4 / 7 | |
| 0.10.7 | 4 / 7 | |
| 0.10.6 | 4 / 7 | |
| 0.10.5 | 4 / 7 | |
| 0.10.4 | 4 / 7 | |
| 0.10.3 | 4 / 7 | |
| 0.10.2 | 4 / 7 | |
| 0.10.1 | 4 / 7 | |
| 0.10.0 | 4 / 7 | |
| 0.9.4 | 4 / 7 | |
| 0.9.3 | 4 / 7 | |
| 0.9.2 | 5 / 7 | |
| 0.9.1 | 5 / 7 | |
| 0.9.0 | 5 / 7 | |
| 0.8.3 | 5 / 7 | |
| 0.8.2 | 5 / 7 |
v0.25.1
1 finding
INFO
Has SLSA provenance attestation
provenance
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.