@silurus/ooxml 0.1.0 → 0.3.0

package/README.md

@@ -2,10 +2,19 @@
 
 # office-open-xml-viewer
 
+[![npm version](https://img.shields.io/npm/v/@silurus/ooxml.svg)](https://www.npmjs.com/package/@silurus/ooxml)
+[![npm downloads](https://img.shields.io/npm/dm/@silurus/ooxml.svg)](https://www.npmjs.com/package/@silurus/ooxml)
+[![license](https://img.shields.io/npm/l/@silurus/ooxml.svg)](./LICENSE)
+
 **[Demo (Storybook)](https://yukiyokotani.github.io/office-open-xml-viewer/)**
 
 A browser-based viewer for Office Open XML documents that renders to an HTML Canvas element.
 The parsers are written in Rust and compiled to WebAssembly; the renderers use the Canvas 2D API.
+Each format also exposes a headless engine (`PptxPresentation` / `DocxDocument` / `XlsxWorkbook`) that renders into any caller-supplied canvas, so you can compose your own UI — scroll views, thumbnail grids, master-detail panes — instead of being locked into the built-in viewer. See the `Examples` section in [the Storybook demo](https://yukiyokotani.github.io/office-open-xml-viewer/).
+
+| PPTX | DOCX | XLSX |
+|:---:|:---:|:---:|
+| ![pptx](docs/images/pptx.png) | ![docx](docs/images/docx.png) | ![xlsx](docs/images/xlsx.png) |
 
 ```bash
 npm install @silurus/ooxml
@@ -15,6 +24,8 @@ pnpm add @silurus/ooxml
 
 > **Bundler note**: this package embeds `.wasm` files. With Vite add [`vite-plugin-wasm`](https://github.com/Menci/vite-plugin-wasm); with webpack use [`experiments.asyncWebAssembly`](https://webpack.js.org/configuration/experiments/).
 
+> **Bundle size note**: npm's *Unpacked Size* figure sums ES (`.mjs`) and CJS (`.cjs`) outputs for all three formats. The size that actually lands in your app is much smaller — import only the format you need (e.g. `@silurus/ooxml/pptx`) and your bundler picks a single module format, so tree-shaking drops the other two formats entirely.
+
 ---
 
 ## Quick Start
@@ -494,6 +505,13 @@ cd packages/xlsx/parser && wasm-pack build --target web && cp pkg/xlsx_parser_bg
 cd packages/docx/parser && wasm-pack build --target web && cp pkg/docx_parser_bg.wasm  pkg/docx_parser.js  ../src/wasm/
 ```
 
+## Security & Privacy
+
+- **Canvas-only rendering.** Documents are decoded and drawn to an `HTMLCanvasElement`. No script, link, form, or other active content from the source file is executed or injected into the DOM.
+- **ZIP decompression cap.** Each entry in the source archive is limited to 512 MiB of uncompressed output to block zip-bomb DoS.
+- **No network by default.** The library does not send telemetry or analytics, and does not contact third-party services unless you ask it to. In particular, PPTX theme webfonts are **not** loaded from Google Fonts unless you pass `useGoogleFonts: true` to `PptxPresentation.load()` / `new PptxViewer(...)`. Enabling that option causes the end-user's browser to send an HTTP request (IP and User-Agent) to `fonts.googleapis.com`, which may have GDPR implications for your application — consider self-hosting the required fonts via `@font-face` instead.
+- **XML parsing.** Uses `roxmltree`, which does not resolve external entities (XXE-safe by default).
+
 ## License
 
 MIT

package/dist/autoResize-U2-IRmNE.js

@@ -0,0 +1,48 @@
+//#region \0rolldown/runtime.js
+var e = Object.defineProperty, t = (t, n) => {
+	let r = {};
+	for (var i in t) e(r, i, {
+		get: t[i],
+		enumerable: !0
+	});
+	return n || e(r, Symbol.toStringTag, { value: "Module" }), r;
+};
+//#endregion
+//#region packages/core/src/autoResize.ts
+function n(e, t, n = {}) {
+	let r = n.pauseWhenHidden ?? !0, i = null, a = 0, o = 0, s = null, c = !1, l = !1, u = () => {
+		if (!l && !(r && typeof document < "u" && document.hidden)) {
+			if (s) {
+				c = !0;
+				return;
+			}
+			i === null && (i = requestAnimationFrame(d));
+		}
+	}, d = async () => {
+		if (i = null, l) return;
+		let t = a, n = o;
+		try {
+			let r = e(t, n);
+			s = r instanceof Promise ? r : Promise.resolve(), await s;
+		} catch (e) {
+			console.error("[autoResize] render failed:", e);
+		} finally {
+			s = null, c && !l && (c = !1, u());
+		}
+	}, f = new ResizeObserver((e) => {
+		for (let t of e) {
+			let e = t.contentRect;
+			a = e.width, o = e.height;
+		}
+		u();
+	});
+	f.observe(t);
+	let p = () => {
+		typeof document < "u" && !document.hidden && u();
+	};
+	return r && typeof document < "u" && document.addEventListener("visibilitychange", p), () => {
+		l = !0, f.disconnect(), i !== null && (cancelAnimationFrame(i), i = null), r && typeof document < "u" && document.removeEventListener("visibilitychange", p);
+	};
+}
+//#endregion
+export { t as n, n as t };

package/dist/autoResize-ggn4hzd8.cjs

@@ -0,0 +1 @@
+var e=Object.defineProperty,t=(t,n)=>{let r={};for(var i in t)e(r,i,{get:t[i],enumerable:!0});return n||e(r,Symbol.toStringTag,{value:`Module`}),r};function n(e,t,n={}){let r=n.pauseWhenHidden??!0,i=null,a=0,o=0,s=null,c=!1,l=!1,u=()=>{if(!l&&!(r&&typeof document<`u`&&document.hidden)){if(s){c=!0;return}i===null&&(i=requestAnimationFrame(d))}},d=async()=>{if(i=null,l)return;let t=a,n=o;try{let r=e(t,n);s=r instanceof Promise?r:Promise.resolve(),await s}catch(e){console.error(`[autoResize] render failed:`,e)}finally{s=null,c&&!l&&(c=!1,u())}},f=new ResizeObserver(e=>{for(let t of e){let e=t.contentRect;a=e.width,o=e.height}u()});f.observe(t);let p=()=>{typeof document<`u`&&!document.hidden&&u()};return r&&typeof document<`u`&&document.addEventListener(`visibilitychange`,p),()=>{l=!0,f.disconnect(),i!==null&&(cancelAnimationFrame(i),i=null),r&&typeof document<`u`&&document.removeEventListener(`visibilitychange`,p)}}Object.defineProperty(exports,`n`,{enumerable:!0,get:function(){return t}}),Object.defineProperty(exports,`t`,{enumerable:!0,get:function(){return n}});