@univerjs/sheets-ui

Spreadsheet UI layer for Univer Sheets.

Latest 1.0.4

NPM

92%

Total Score

healthy

Active releases and a well-backed repository support adoption; all workflow actions are unpinned.

Are you affected? Scan for Free

Health Score Breakdown

Workflow audit

All 8 workflows were analyzed without failed files or audit findings, and no untrusted checkout or script-injection path was detected. However, all 21 action references are unpinned, and two workflows grant top-level write permissions, so CI supply-chain hygiene is weaker than ideal.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-10795 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @univerjs/sheets-ui is vulnerable to Incorrect Authorization in versions 0.5.4 - 0.20.1.	0.5.4 - 0.20.1	Medium

Package versions

Maintainers

jikkai

wbfsa

mengshukeji

Direct Dependencies

Dependency	Last Release	Score
@univerjs/ui Version 1.0.4	—	—
@univerjs/core Version 1.0.4	—	—
@univerjs/docs Version 1.0.4	—	—
@univerjs/icons Version 1.43.1	—	—
@univerjs/design Version 1.0.4	—	—