React web charting controls for Microsoft fluentui system.
90%
Total Score
healthy
Healthy release backed by active maintenance and a broad contributor base.
No build attestation or trusted-publisher provenance is present, leaving the exact registry build origin less transparent despite the project's active repository maintenance.
The repository name does not match the package and its README does not mention this package, so the linkage is less explicit than ideal for a monorepo package.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2024-10505 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @fluentui/react-charting is vulnerable to Cross-site Scripting (XSS) in versions 5.0.0 - 5.23.17. | 5.0.0 - 5.23.17 | Medium |
| Dependency | Last Release | Score |
|---|---|---|
tslib Version ^2.1.0 | — | — |
d3-axis Version ^3.0.0 | — | — |
d3-time Version ^3.0.0 | — | — |
d3-array Version ^3.0.0 | — | — |
d3-color Version ^3.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.