@papernote/ui 1.3.0 → 1.3.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@papernote/ui",
-  "version": "1.3.0",
+  "version": "1.3.1",
   "type": "module",
   "description": "A modern React component library with a paper notebook aesthetic - minimal, professional, and expressive",
   "main": "dist/index.js",
@@ -40,9 +40,9 @@
   },
   "peerDependencies": {
     "lucide-react": "^0.553.0",
-    "react": "^18.0.0 || ^19.0.0",
-    "react-dom": "^18.0.0 || ^19.0.0",
-    "react-router-dom": "^6.0.0 || ^7.0.0"
+    "react": "^19.0.0",
+    "react-dom": "^19.0.0",
+    "react-router-dom": "^7.0.0"
   },
   "devDependencies": {
     "@rollup/plugin-commonjs": "^25.0.0",

package/src/components/Spreadsheet.tsx

@@ -1,10 +1,10 @@
 import React, { useState, useCallback } from 'react';
 import BaseSpreadsheet, { CellBase, Matrix } from 'react-spreadsheet';
-import { read, utils, writeFile, WorkBook } from 'xlsx';
+import { utils, writeFile } from 'xlsx';
 import Button from './Button';
 import Card, { CardHeader, CardTitle, CardContent } from './Card';
 import Stack from './Stack';
-import { Download, Upload, Save } from 'lucide-react';
+import { Download, Save } from 'lucide-react';
 import { addSuccessMessage, addErrorMessage } from './StatusBar';
 import './Spreadsheet.css';
 
@@ -39,7 +39,11 @@ export interface SpreadsheetProps {
   rowLabels?: string[];
   /** Show toolbar with actions */
   showToolbar?: boolean;
-  /** Enable Excel import */
+  /**
+   * Enable Excel import
+   * @deprecated Excel import has been disabled due to security vulnerabilities in the xlsx library.
+   * This prop is kept for API compatibility but has no effect.
+   */
   enableImport?: boolean;
   /** Enable Excel export */
   enableExport?: boolean;
@@ -123,7 +127,7 @@ export const Spreadsheet: React.FC<SpreadsheetProps> = ({
   columnLabels,
   rowLabels,
   showToolbar = false,
-  enableImport = false,
+  enableImport: _enableImport = false, // Deprecated - kept for API compatibility
   enableExport = false,
   enableSave = false,
   onSave,
@@ -153,44 +157,6 @@ export const Spreadsheet: React.FC<SpreadsheetProps> = ({
     [onChange]
   );
 
-  // Handle Excel import
-  const handleImport = useCallback(
-    (event: React.ChangeEvent<HTMLInputElement>) => {
-      const file = event.target.files?.[0];
-      if (!file) return;
-
-      const reader = new FileReader();
-      reader.onload = (e) => {
-        try {
-          const workbook: WorkBook = read(e.target?.result, { type: 'binary' });
-          const sheetName = workbook.SheetNames[0];
-          const worksheet = workbook.Sheets[sheetName];
-
-          // Convert to array of arrays
-          const jsonData: any[][] = utils.sheet_to_json(worksheet, { header: 1 });
-
-          // Convert to spreadsheet format
-          const spreadsheetData: Matrix<SpreadsheetCell> = jsonData.map(row =>
-            row.map(cell => ({
-              value: cell,
-            }))
-          );
-
-          handleChange(spreadsheetData);
-          addSuccessMessage('Excel file imported successfully');
-        } catch (error) {
-          console.error('Error importing Excel file:', error);
-          addErrorMessage('Failed to import Excel file');
-        }
-      };
-      reader.readAsBinaryString(file);
-
-      // Reset input
-      event.target.value = '';
-    },
-    [handleChange]
-  );
-
   // Handle Excel export
   const handleExport = useCallback(() => {
     try {
@@ -238,20 +204,6 @@ export const Spreadsheet: React.FC<SpreadsheetProps> = ({
     <Stack direction="horizontal" spacing="md" align="center" className="mb-4">
       {title && <div className="text-lg font-medium text-ink-900 flex-1">{title}</div>}
 
-      {enableImport && (
-        <label>
-          <input
-            type="file"
-            accept=".xlsx,.xls,.csv"
-            onChange={handleImport}
-            className="hidden"
-          />
-          <Button variant="ghost" size="sm" icon={<Upload className="h-4 w-4" />}>
-            Import
-          </Button>
-        </label>
-      )}
-
       {enableExport && (
         <Button
           variant="ghost"
@@ -342,7 +294,6 @@ export const SpreadsheetReport: React.FC<
     <Spreadsheet
       {...props}
       showToolbar
-      enableImport
       enableExport
       enableSave
       wrapInCard