Generated on Apr 1, 2024 via pnpm

Npm

Home

handsontable 8.1.0

Handsontable is a JavaScript Spreadsheet Component available for React, Angular and Vue.

data

grid

table

Package summary

issues

licenses

Package created

4 Mar 2016

Version published

1 Oct 2020

Maintainers

Total deps

Direct deps

License

SEE LICENSE IN LICENSE.txt

Issues

6 high severity issues

high

handsontable@8.1.0

Inefficient Regular Expression Complexity in handsontable

Recommendation: Upgrade to version 10.0.0 or later

via: handsontable@8.1.0

handsontable@8.1.0

Inefficient Regular Expression Complexity in handsontable

Recommendation: Upgrade to version 10.0.0 or later

via: handsontable@8.1.0

moment@2.24.0

Moment.js vulnerable to Inefficient Regular Expression Complexity

Recommendation: Upgrade to version 2.29.4 or later

via: @types/pikaday@1.7.4 & others

moment@2.24.0

Path Traversal: 'dir/../../filename' in moment.locale

Recommendation: Upgrade to version 2.29.2 or later

via: @types/pikaday@1.7.4 & others

handsontable@8.1.0

Package uses an invalid SPDX license ("SEE LICENSE IN LICENSE.txt")

Recommendation: Validate that the package complies with your license policy

via: handsontable@8.1.0

core-js@3.36.1

Package uses postinstall script: "node -e "try{require('./postinstall')}catch(e){}""

via: core-js@3.36.1

Collapse

Expand

1 low severity issue

low

handsontable@8.1.0

Package uses a license that is not OSI approved ("SEE LICENSE IN LICENSE.txt")

Recommendation: Read and validate the license terms

via: handsontable@8.1.0

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

9 Packages, Including:

@handsontable/formulajs@2.0.2

@types/pikaday@1.7.4

bignumber.js@8.1.1

core-js@3.36.1

hot-formula-parser@3.0.2

jstat@1.9.6

moment@2.24.0

numbro@2.1.2

tiny-emitter@2.1.0

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

1 Packages, Including:

bessel@1.0.2

SEE LICENSE IN LICENSE.txt

Invalid

Not OSI Approved

1 Packages, Including:

handsontable@8.1.0

(0BSD OR MIT)

Permissive

1 Packages, Including:

pikaday@1.8.0

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of handsontable 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
@types/pikaday	1.7.4	4.24 kB	MIT	prod	2
core-js	3.36.1	1.16 MB	MIT	prod	1
hot-formula-parser	3.0.2	169.8 kB	MIT	prod
moment	2.24.0	517.34 kB	MIT	prod	2
numbro	2.1.2	225.81 kB	MIT	prod
pikaday	1.8.0	28.48 kB	(0BSD OR MIT)	prod

Tree

Treemap

Recent Versions

handsontable 8.1.0