Generated on Mar 21, 2024 via pnpm

Npm

Home

handsontable 11.0.0

Handsontable is a JavaScript Spreadsheet Component available for React, Angular and Vue.

data

grid

table

Package summary

issues

licenses

Package created

4 Mar 2016

Version published

17 Nov 2021

Maintainers

Total deps

Direct deps

License

SEE LICENSE IN LICENSE.txt

Issues

5 high severity issues

high

moment@2.24.0

Moment.js vulnerable to Inefficient Regular Expression Complexity

Recommendation: Upgrade to version 2.29.4 or later

via: @types/pikaday@1.7.4 & others

moment@2.24.0

Path Traversal: 'dir/../../filename' in moment.locale

Recommendation: Upgrade to version 2.29.2 or later

via: @types/pikaday@1.7.4 & others

handsontable@11.0.0

Package uses an invalid SPDX license ("SEE LICENSE IN LICENSE.txt")

Recommendation: Validate that the package complies with your license policy

via: handsontable@11.0.0

hyperformula@1.3.1

Package uses an invalid SPDX license ("SEE LICENSE IN LICENSE.txt")

Recommendation: Validate that the package complies with your license policy

via: hyperformula@1.3.1

core-js@3.36.1

Package uses postinstall script: "node -e "try{require('./postinstall')}catch(e){}""

via: core-js@3.36.1 & others

Collapse

Expand

2 low severity issues

low

handsontable@11.0.0

Package uses a license that is not OSI approved ("SEE LICENSE IN LICENSE.txt")

Recommendation: Read and validate the license terms

via: handsontable@11.0.0

hyperformula@1.3.1

Package uses a license that is not OSI approved ("SEE LICENSE IN LICENSE.txt")

Recommendation: Read and validate the license terms

via: hyperformula@1.3.1

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

8 Packages, Including:

@types/pikaday@1.7.4

bignumber.js@8.1.1

core-js@3.36.1

moment@2.24.0

numbro@2.1.2

regenerator-runtime@0.13.11

regexp-to-ast@0.4.0

tiny-emitter@2.1.0

SEE LICENSE IN LICENSE.txt

Invalid

Not OSI Approved

2 Packages, Including:

handsontable@11.0.0

hyperformula@1.3.1

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

1 Packages, Including:

chevrotain@6.5.0

(MPL-2.0 OR Apache-2.0)

Permissive

1 Packages, Including:

dompurify@2.4.9

(0BSD OR MIT)

Permissive

1 Packages, Including:

pikaday@1.8.0

MIT or GPL-2.0

Permissive

1 Packages, Including:

unorm@1.6.0

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of handsontable 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
@types/pikaday	1.7.4	4.24 kB	MIT	prod	2
core-js	3.36.1	1.16 MB	MIT	prod optional	1
dompurify	2.4.9	717.19 kB	(MPL-2.0 OR Apache-2.0)	prod
hyperformula	1.3.1	2.36 MB	SEE LICENSE IN LICENSE.txt	prod optional	2 1
moment	2.24.0	517.34 kB	MIT	prod	2
numbro	2.1.2	225.81 kB	MIT	prod
pikaday	1.8.0	28.48 kB	(0BSD OR MIT)	prod