Generated on May 6, 2024 via pnpm

Npm

Home

handsontable 9.0.2

Handsontable is a JavaScript Spreadsheet Component available for React, Angular and Vue.

data

grid

table

Package summary

issues

licenses

Package created

4 Mar 2016

Version published

28 Jul 2021

Maintainers

Total deps

160

Direct deps

License

SEE LICENSE IN LICENSE.txt

Issues

12 high severity issues

high

handsontable@9.0.2

Inefficient Regular Expression Complexity in handsontable

Recommendation: Upgrade to version 10.0.0 or later

via: handsontable@9.0.2

handsontable@9.0.2

Inefficient Regular Expression Complexity in handsontable

Recommendation: Upgrade to version 10.0.0 or later

via: handsontable@9.0.2

moment@2.24.0

Moment.js vulnerable to Inefficient Regular Expression Complexity

Recommendation: Upgrade to version 2.29.4 or later

via: @types/pikaday@1.7.4 & others

moment@2.24.0

Path Traversal: 'dir/../../filename' in moment.locale

Recommendation: Upgrade to version 2.29.2 or later

via: @types/pikaday@1.7.4 & others

handsontable@9.0.2

Package uses an invalid SPDX license ("SEE LICENSE IN LICENSE.txt")

Recommendation: Validate that the package complies with your license policy

via: handsontable@9.0.2

hyperformula@0.6.2

Package uses an invalid SPDX license ("SEE LICENSE IN LICENSE.txt")

Recommendation: Validate that the package complies with your license policy

via: hyperformula@0.6.2

rc@1.2.8

Package uses a custom license expression: `(BSD-2-Clause OR MIT OR Apache-2.0)`

Recommendation: Validate that the license expression complies with your license policy

via: hyperformula@0.6.2

core-js@3.37.0

Package uses postinstall script: "node -e "try{require('./postinstall')}catch(e){}""

via: core-js@3.37.0 & others

gl@4.9.2

Package uses install script: "prebuild-install || node-gyp rebuild"

via: hyperformula@0.6.2

har-validator@5.1.5

Deprecated package

via: hyperformula@0.6.2

request@2.88.2

Deprecated package

via: hyperformula@0.6.2

uuid@3.4.0

Deprecated package

via: hyperformula@0.6.2

Collapse

Expand

2 moderate severity issues

moderate

tough-cookie@2.5.0

tough-cookie Prototype Pollution vulnerability

Recommendation: Upgrade to version 4.1.3 or later

via: hyperformula@0.6.2

request@2.88.2

Server-Side Request Forgery in Request

Recommendation: None

via: hyperformula@0.6.2

Collapse

Expand

2 low severity issues

low

handsontable@9.0.2

Package uses a license that is not OSI approved ("SEE LICENSE IN LICENSE.txt")

Recommendation: Read and validate the license terms

via: handsontable@9.0.2

hyperformula@0.6.2

Package uses a license that is not OSI approved ("SEE LICENSE IN LICENSE.txt")

Recommendation: Read and validate the license terms

via: hyperformula@0.6.2

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

102 Packages, Including:

@types/pikaday@1.7.4

acorn@7.4.1

ajv@6.12.6

ansi-regex@2.1.1

asn1@0.2.6

assert-plus@1.0.0

asynckit@0.4.0

aws4@1.12.0

balanced-match@1.0.2

base64-js@1.5.1

bignumber.js@8.1.1

bindings@1.5.0

bit-twiddle@1.0.2

bl@4.1.0

brace-expansion@1.1.11

buffer@5.7.1

code-point-at@1.1.0

combined-stream@1.0.8

concat-map@0.0.1

core-js@3.37.0

core-util-is@1.0.2

core-util-is@1.0.3

dashdash@1.14.1

decompress-response@4.2.1

deep-extend@0.6.0

delayed-stream@1.0.0

delegates@1.0.0

ecc-jsbn@0.1.2

end-of-stream@1.4.4

env-paths@2.2.1

extend@3.0.2

extsprintf@1.3.0

fast-deep-equal@3.1.3

fast-json-stable-stringify@2.1.0

file-uri-to-path@1.0.0

form-data@2.3.3

fs-constants@1.0.0

getpass@0.1.7

github-from-package@0.0.0

gl-wiretap@0.6.2

glsl-tokenizer@2.1.5

gpu-mock.js@1.3.1

gpu.js@2.3.0

har-validator@5.1.5

http-signature@1.2.0

is-fullwidth-code-point@1.0.0

is-typedarray@1.0.0

isarray@0.0.1

isarray@1.0.0

isstream@0.1.2

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

35 Packages, Including:

abbrev@1.1.1

aproba@1.2.0

are-we-there-yet@1.1.7

chownr@1.1.4

chownr@2.0.0

console-control-strings@1.1.0

fs-minipass@2.1.0

fs.realpath@1.0.0

gauge@2.7.4

glob@7.2.3

graceful-fs@4.2.11

har-schema@2.0.0

has-unicode@2.0.1

inflight@1.0.6

inherits@2.0.4

ini@1.3.8

isexe@2.0.0

json-stringify-safe@5.0.1

lru-cache@6.0.0

minimatch@3.1.2

minipass@3.3.6

minipass@5.0.0

nopt@5.0.0

npmlog@4.1.2

once@1.4.0

rimraf@3.0.2

semver@5.7.2

semver@7.6.0

set-blocking@2.0.0

signal-exit@3.0.7

tar@6.2.1

which@2.0.2

wide-align@1.1.5

wrappy@1.0.2

yallist@4.0.0

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

8 Packages, Including:

aws-sign2@0.7.0

caseless@0.12.0

chevrotain@6.5.0

detect-libc@1.0.3

forever-agent@0.6.1

oauth-sign@0.9.0

request@2.88.2

tunnel-agent@0.6.0

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

4 Packages, Including:

bcrypt-pbkdf@1.0.2

ieee754@1.2.1

qs@6.5.3

tough-cookie@2.5.0

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

2 Packages, Including:

gl@4.9.2

uri-js@4.4.1

SEE LICENSE IN LICENSE.txt

Invalid

Not OSI Approved

2 Packages, Including:

handsontable@9.0.2

hyperformula@0.6.2

(MPL-2.0 OR Apache-2.0)

Permissive

1 Packages, Including:

dompurify@2.5.2

(MIT OR WTFPL)

Permissive

1 Packages, Including:

expand-template@2.0.3

(AFL-2.1 OR BSD-3-Clause)

Permissive

1 Packages, Including:

json-schema@0.4.0

(0BSD OR MIT)

Permissive

1 Packages, Including:

pikaday@1.8.0

(BSD-2-Clause OR MIT OR Apache-2.0)

Expression

1 Packages, Including:

rc@1.2.8

The Unlicense

Public Domain

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

private-use

modify

Cannot

include-copyright

hold-liable

Must

1 Packages, Including:

tweetnacl@0.14.5

MIT or GPL-2.0

Permissive

1 Packages, Including:

unorm@1.6.0

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of handsontable 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
@types/pikaday	1.7.4	4.24 kB	MIT	prod	2
core-js	3.37.0	1.17 MB	MIT	prod optional	1
dompurify	2.5.2	727.92 kB	(MPL-2.0 OR Apache-2.0)	prod
hyperformula	0.6.2	2.31 MB	SEE LICENSE IN LICENSE.txt	prod optional	7 2 1
moment	2.24.0	517.34 kB	MIT	prod	2
numbro	2.1.2	225.81 kB	MIT	prod
pikaday	1.8.0	28.48 kB	(0BSD OR MIT)	prod