dash-uploader-ng 1.0.0__tar.gz

dash_uploader_ng-1.0.0/LICENSE.txt

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2020- Niko Föhr
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

dash_uploader_ng-1.0.0/MANIFEST.in

@@ -0,0 +1,11 @@
+include dash_uploader_ng/_build/dash_uploader_ng.min.js
+include dash_uploader_ng/_build/dash_uploader_ng.min.js.map
+include dash_uploader_ng/_build/dash_uploader_ng.min.js.LICENSE.txt
+include dash_uploader_ng/_build/metadata.json
+include dash_uploader_ng/_build/package-info.json
+include README.md
+include SECURITY.md
+include docs/README-PyPi.md
+include docs/CHANGELOG.md
+include LICENSE.txt
+include package.json

dash_uploader_ng-1.0.0/PKG-INFO

@@ -0,0 +1,84 @@
+Metadata-Version: 2.4
+Name: dash-uploader-ng
+Version: 1.0.0
+Summary: Large file upload component for Dash -- a maintained, security-patched fork of dash-uploader
+Author-email: Niko Föhr <fohrloop@gmail.com>
+Maintainer: Awwab Mahdi, Claude (Anthropic)
+License-Expression: MIT
+Project-URL: Homepage, https://github.com/obliviance/dash-uploader-ng
+Project-URL: Repository, https://github.com/obliviance/dash-uploader-ng
+Project-URL: Issues, https://github.com/obliviance/dash-uploader-ng/issues
+Project-URL: Security, https://github.com/obliviance/dash-uploader-ng/blob/main/SECURITY.md
+Keywords: dash,upload,plotly,flow.js,file-upload
+Classifier: Framework :: Dash
+Classifier: Framework :: Flask
+Classifier: Intended Audience :: Developers
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Software Development :: Libraries :: Python Modules
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+License-File: LICENSE.txt
+Requires-Dist: dash>=2.0
+Requires-Dist: packaging>=21.0
+Provides-Extra: test
+Requires-Dist: pytest>=7.0; extra == "test"
+Requires-Dist: flask>=2.0; extra == "test"
+Dynamic: license-file
+
+
+![PyPI](https://img.shields.io/pypi/v/dash-uploader-ng)&nbsp;![PyPI - Downloads](https://img.shields.io/pypi/dm/dash-uploader-ng)&nbsp;![Python versions](https://img.shields.io/pypi/pyversions/dash-uploader-ng)&nbsp;![License](https://img.shields.io/pypi/l/dash-uploader-ng)
+
+![upload large files with dash-uploader-ng](https://raw.githubusercontent.com/obliviance/dash-uploader-ng/main/docs/upload-demo.gif)
+
+# 📤 dash-uploader-ng
+The upload package for [Dash](https://dash.plotly.com/) applications using large data files. A maintained, security-patched fork of [dash-uploader](https://github.com/fohrloop/dash-uploader).
+
+### 🏠 Homepage & Documentation
+[https://github.com/obliviance/dash-uploader-ng](https://github.com/obliviance/dash-uploader-ng)
+
+
+## Short summary
+&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 💾 Data file size has no limits. (Except the hard disk size)<bR>
+&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ☎ Call easily a callback after uploading is finished.<br>
+&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 📦 Upload files using [flow.js](https://github.com/flowjs/flow.js/) 
+<br>
+&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ✅ Works with Dash 2.0+ (verified on Dash 4.x) & Python 3.10+.<br>
+&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 🔒 Security-patched fork of dash-uploader (fixes CVE-2026-38360).<br>
+
+
+
+## Installing
+```
+pip install dash-uploader-ng
+```
+
+## Usage
+
+
+### Simple example
+
+```python
+import dash
+from dash import html
+import dash_uploader_ng as du
+
+app = dash.Dash(__name__)
+
+# 1) configure the upload folder
+du.configure_upload(app, r"C:\tmp\Uploads")
+
+# 2) Use the Upload component
+app.layout = html.Div([
+    du.Upload(),
+])
+
+if __name__ == '__main__':
+    app.run(debug=True)
+
+```
+

dash_uploader_ng-1.0.0/README.md

@@ -0,0 +1,199 @@
+# 📤 dash-uploader-ng
+
+A maintained, **security-patched** fork of
+[dash-uploader](https://github.com/fohrloop/dash-uploader) — the upload
+component for [Dash](https://dash.plotly.com/) applications that need large
+data files.
+
+Upstream dash-uploader was archived on 2025-07-19 without a fix for
+[CVE-2026-38360](SECURITY.md), a critical (CVSS 9.8) path-traversal → RCE in
+the upload endpoint. This fork **fixes that vulnerability**, modernizes the
+packaging, and refreshes the dependency tree while keeping the same API.
+
+> **Migrating from `dash-uploader`:** the import name changed, so update your
+> imports. Nothing else in your app needs to change.
+> ```diff
+> - import dash_uploader as du
+> + import dash_uploader_ng as du
+> ```
+
+- 🔒 **CVE-2026-38360 fixed** — see [SECURITY.md](SECURITY.md).
+- 🧰 **Modernized** — `pyproject.toml`, Python 3.10–3.13, `dash>=2.0` (verified
+  on dash 4.x), zero known npm vulnerabilities in the build.
+- 🤝 **Drop-in API** — same `configure_upload` / `Upload` / `callback` /
+  `UploadStatus` as upstream.
+
+
+
+## Table of contents
+- [Short summary](#short-summary)
+- [dash-uploader vs. dcc.Upload](#dash-uploader-vs-dccupload)
+- [Installing](#installing)
+- [Quickstart](#quickstart)
+  - [Simple example](#simple-example)
+  - [Example with callback](#example-with-callback-and-other-options)
+- [Contributing](#contributing)
+- [Documentation](#documentation)
+- [Changelog](#changelog)
+- [Credits](#credits)
+
+## Short summary
+&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 💾 Data file size has no limits. (Except the hard disk size)<bR>
+&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ☎ Call easily a callback after uploading is finished.<br>
+&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 📤 Upload files using [flow.js](https://github.com/flowjs/flow.js/) <br>
+&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 📦 All JS and CSS bundled with the package. No need for network calls for CSS/JS.<br>
+&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ✅ Works with Dash 2.0+ (verified on Dash 4.x) & Python 3.10+.<br>
+
+
+### dash-uploader vs. [dcc.Upload](https://dash.plotly.com/dash-core-components/upload)
+
+
+
+
+
+|                       | dash-uploader                                      | [dcc.Upload](https://dash.plotly.com/dash-core-components/upload)                                                                                                                    |
+| --------------------- | -------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
+| Underlying technology | [flow.js](https://github.com/flowjs/flow.js/)      | HTML5 API                                                                                                                                                                            |
+| File size             | Unlimited                                          | max ~150-200MB ([link](https://community.plotly.com/t/dash-upload-component-decoding-large-files/8033/11))                                                                           |
+| Uploads to            | Hard disk (server side)                            | First to browser memory (user side) Then, to server using callbacks.                                                                                                                 |
+| Data type             | Uploaded as file; no need to parse at server side. | Uploaded as byte64 encoded string  -> Needs parsing                                                                                                                                  |
+| See upload progress?  | Progressbar out of the box                         | No upload indicators out of the box. Generic loading indicator possible. [Progressbar not possible](https://community.plotly.com/t/upload-after-confirmation-and-progress-bar/7172). |
+
+# Installing
+```
+pip install dash-uploader-ng
+```
+
+# Quickstart
+
+Full documentation [here](docs/dash-uploader.md) 
+>⚠️**Security note**: The Upload component allows POST requests and uploads of arbitrary files to the server harddisk and one should take this into account (with user token checking etc.) if used as part of a public website! For this you can utilize the  `http_request_handler` argument of the [du.configure_upload](https://github.com/fohrloop/dash-uploader/blob/master/docs/dash-uploader.md#duconfigure_upload). (New in version 0.5.0)
+
+## Simple example
+
+```python
+import dash
+from dash import html
+import dash_uploader_ng as du
+
+app = dash.Dash(__name__)
+
+# 1) configure the upload folder
+du.configure_upload(app, r"C:\tmp\Uploads")
+
+# 2) Use the Upload component
+app.layout = html.Div([
+    du.Upload(),
+])
+
+if __name__ == '__main__':
+    app.run(debug=True)
+
+```
+
+## Example with callback (and other options)
+- **New in version 0.7.0:** Functions decorated with [`@du.callback`](https://github.com/fohrloop/dash-uploader/blob/dev/docs/dash-uploader.md#ducallback) must take `status` ([`du.UploadStatus`](https://github.com/fohrloop/dash-uploader/blob/dev/docs/dash-uploader.md#duuploadstatus)) object as the only input parameter (previously, `filenames`)
+
+
+```python
+from pathlib import Path
+import uuid
+
+import dash_uploader_ng as du
+import dash
+from dash import html
+from dash.dependencies import Input, Output, State
+
+app = dash.Dash(__name__)
+
+UPLOAD_FOLDER_ROOT = r"C:\tmp\Uploads"
+du.configure_upload(app, UPLOAD_FOLDER_ROOT)
+
+def get_upload_component(id):
+    return du.Upload(
+        id=id,
+        max_file_size=1800,  # 1800 MB
+        filetypes=['csv', 'zip'],
+        upload_id=uuid.uuid1(),  # Unique session id
+    )
+
+
+def get_app_layout():
+
+    return html.Div(
+        [
+            html.H1('Demo'),
+            html.Div(
+                [
+                    get_upload_component(id='dash-uploader'),
+                    html.Div(id='callback-output'),
+                ],
+                style={  # wrapper div style
+                    'textAlign': 'center',
+                    'width': '600px',
+                    'padding': '10px',
+                    'display': 'inline-block'
+                }),
+        ],
+        style={
+            'textAlign': 'center',
+        },
+    )
+
+
+# get_app_layout is a function
+# This way we can use unique session id's as upload_id's
+app.layout = get_app_layout
+
+
+@du.callback(
+    output=Output("callback-output", "children"),
+    id="dash-uploader",
+)
+def callback_on_completion(status: du.UploadStatus):
+    return html.Ul([html.Li(str(x)) for x in status.uploaded_files])
+
+
+
+if __name__ == '__main__':
+    app.run(debug=True)
+
+```
+
+
+## Contributing
+
+
+| What?                                | How?                                                                                                                                                                                                                                         |
+| :----------------------------------- | :------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| 🐞 Found a bug?                       | 🎟 <a href="https://github.com/fohrloop/dash-uploader/issues">File an Issue</a>                                                                                                                                                                   |
+| 🙋‍♂️ Need help?                         | ❔  <a href="https://stackoverflow.com/questions/ask">Ask a question on StackOverflow</a> <br><a href="https://community.plotly.com/t/show-and-tell-dash-uploader-upload-large-files/38451">📧 Use this thread on community.plotly.com</a>     |
+| 💡  Want to submit a feature request? | <a href="https://community.plotly.com/t/show-and-tell-dash-uploader-upload-large-files/38451">🎭 Discuss about it on community.plotly.com</a><br><a href="https://github.com/fohrloop/dash-uploader/issues">🎫 File an Issue (feature request)</a> |
+| 🧙  Want to write code?               | 🔥 <a href="./docs/CONTRIBUTING.md">Here's how you get started!</a>                                                                                                                                                                           |
+## Documentation
+- [Documentation](docs/dash-uploader.md)
+- [Developer documentation](docs/CONTRIBUTING.md)
+- [Migration Guide](https://github.com/fohrloop/dash-uploader/wiki/Migration-Guide)
+
+## Changelog
+
+- [Changelog](./docs/CHANGELOG.md)
+
+## Maintainers
+
+- **Awwab Mahdi** — human maintainer. Security reports and issues go to
+  [GitHub](https://github.com/obliviance/dash-uploader-ng/security/advisories/new);
+  see [SECURITY.md](SECURITY.md).
+- **Claude (Anthropic)** — the CVE-2026-38360 fix, the modernization, and the
+  upstream parity test suite in this fork.
+
+`dash-uploader-ng` is an independent fork and is **not** affiliated with or
+endorsed by the original author. Original authorship is retained in
+[LICENSE.txt](LICENSE.txt) and in the package's `authors` metadata.
+
+## Credits
+- History: This package is based on the React 16 compatible version [dash-resumable-upload](https://github.com/westonkjones/dash-resumable-upload) (0.0.4) by [Weston Jones](https://github.com/westonkjones/) which in turn is based on [dash-resumable-upload](https://github.com/rmarren1/dash-resumable-upload) (0.0.3) by [Ryan Marren](https://github.com/rmarren1) 
+- The package boilerplate is taken from the [dash-component-boilerplate](https://github.com/plotly/dash-component-boilerplate).
+- The uploading JS function utilizes the [flow.js](https://github.com/flowjs/flow.js/) (2.14.x).
+- The JS component is created using [React](https://github.com/facebook/react) (17.0.x)
+- The CSS styling is mostly from [Bootstrap](https://getbootstrap.com/) 4.

dash_uploader_ng-1.0.0/SECURITY.md

@@ -0,0 +1,140 @@
+# Security
+
+## CVE-2026-38360 — path traversal → RCE (fixed in this fork)
+
+**Affected:** upstream `dash-uploader`, all versions `0.1.0` through `0.7.0a2`.
+**Severity:** Critical — CWE-22, CVSS 3.1 score 9.8 (network / no auth / low complexity).
+**Status upstream:** unpatched; the repository was archived on 2025-07-19.
+**Status here:** fixed in `dash-uploader-ng` from `1.0.0` onward.
+
+### What it was
+
+The upload endpoint (`/API/dash-uploader` by default) took three form fields
+straight off an unauthenticated `POST` and joined them onto the upload
+directory without checking that the result stayed inside it:
+
+- `upload_id` — used as a directory name under the upload root
+- `flowFilename` — used as the saved file's name
+- `flowIdentifier` — used as a per-upload temp directory name
+
+A single request was enough to write outside the upload root:
+
+```
+upload_id=../../../../usr/local/lib/python3.10/site-packages
+flowFilename=evil.pth
+```
+
+Writing a `.pth` file into `site-packages` turns an arbitrary file write into
+**remote code execution**: Python executes `.pth` files on the next interpreter
+start. Other primitives (dropping `sitecustomize.py`, overwriting a module or a
+WSGI entry point, planting a script in a cron directory) get there too.
+
+### How it's fixed
+
+Validation happens once, at the request boundary, in
+[`dash_uploader_ng/safepath.py`](dash_uploader_ng/safepath.py), in two layers:
+
+1. **Reject bad components up front.** `upload_id` and `flowIdentifier` must be
+   a single safe path segment; `flowFilename` / `flowRelativePath` have any
+   directory part stripped (folder uploads are flattened, as upstream
+   documented) and the remainder validated. A rejected request returns
+   **HTTP 400**, not a 500.
+2. **Re-check the resolved path before every write.** `ensure_within()`
+   resolves the candidate and the upload root and refuses anything that lands
+   outside the root — this also catches escapes that only appear after symlink
+   resolution, which a purely lexical check on the form fields cannot see.
+
+Filenames are **not** run through `werkzeug.utils.secure_filename`, on purpose:
+it ASCII-folds, so it would silently turn `données.csv` into `donnes.csv` and
+empty out a fully non-Latin filename. The fork strips separators and validates
+the remainder instead, so real-world filenames survive intact.
+
+The handler was also hardened against a missing/absurd `flowTotalChunks` and an
+out-of-range `flowChunkNumber`, which previously crashed with a 500.
+
+### Tests
+
+- [`tests/test_safepath.py`](tests/test_safepath.py) — the validation helpers in
+  isolation (accept/reject tables, including a symlink-escape case).
+- [`tests/test_security_cve_2026_38360.py`](tests/test_security_cve_2026_38360.py)
+  — the published proof of concept and variants fired at a live Flask app,
+  asserting against the filesystem that nothing lands outside the upload root,
+  plus regression tests that ordinary and non-ASCII uploads still work.
+
+- [`tests/test_upstream_parity.py`](tests/test_upstream_parity.py) —
+  **differential tests** that run this fork's handler and the *pristine
+  upstream handler* (vendored at `tests/_upstream/`) over the same requests and
+  diff the results. Legitimate traffic must behave identically; hostile traffic
+  must not.
+
+The first three run headless: `pytest` (no browser required). Upstream's
+Selenium suite lives in `tests/browser/` and also passes — see
+[Compatibility](#compatibility-with-dash-uploader) below.
+
+## What is actually exploitable, per vector
+
+Measured by running the real upstream code, not inferred from the advisory:
+
+| Vector | Upstream behaviour | This fork |
+| --- | --- | --- |
+| `upload_id` traversal | **200 OK, writes outside the upload root** — the RCE primitive | 400, nothing written |
+| `flowIdentifier` traversal | Writes outside the root, but only **observably on an incomplete upload** — a completed one `rmtree()`s the evidence | 400, nothing written |
+| `flowFilename` traversal | **500** — dies on `FileNotFoundError` before it can escape; a denial of service, not an arbitrary write | 200, flattened to a bare filename inside the root |
+
+Two things worth knowing here. The `flowIdentifier` vector looks harmless if
+you test it with a single-chunk upload, because the escaped directory is the
+temp chunk directory and upstream deletes it on completion — declare more
+chunks than you send and the escaped file simply stays. And the advisory is
+*more* pessimistic than the code for `flowFilename`: that one crashes rather
+than writing anywhere.
+
+## Compatibility with dash-uploader
+
+The fork is a drop-in for everything a real flow.js client sends. Verified two
+ways:
+
+- **Upstream's own browser suite passes** — 7 passed, 1 skipped (upstream's own
+  Windows-only marker), against Chromium in headless mode, including a real
+  end-to-end file upload through the browser.
+- **Differential tests** confirm byte-identical results to upstream for
+  single-chunk, multi-chunk, re-upload, empty, binary, and non-ASCII
+  (`données.csv`, `отчет.csv`, `報告書.xlsx`) uploads, with and without
+  `use_upload_id`.
+
+### Deliberate behaviour changes
+
+These are the cases where the fork does **not** match upstream. All are pinned
+by tests so they cannot drift silently.
+
+1. **Stricter `upload_id`.** Values upstream accepted are now rejected with a
+   400: spaces (`my session`), colons (`session:42`), non-ASCII (`café`),
+   leading dots (`.hidden`), trailing dots (`session.`). uuid1/uuid4 — what
+   `du.Upload()` generates by default — are unaffected. If your app passes its
+   own `upload_id`, map it to `[A-Za-z0-9._-]` starting with an alphanumeric
+   first. The alternative was hand-reasoning about which "harmless" oddities
+   compose into a traversal on which filesystem.
+2. **Errors are real HTTP errors.** Upstream logged the exception and returned
+   `None`, which Flask rejected as an invalid response — so failures surfaced
+   as an accidental 500, and the `abort()` calls inside `_get` were swallowed
+   and became 500s too. Malformed requests are now 400, genuine faults 500, and
+   `_get`'s 404 is a 404.
+3. **`post_after` / `get_after` run on success only.** A failing request now
+   propagates as an HTTP error response instead of being swallowed, so those
+   hooks no longer fire on failure. Override `post`/`get` if you need a hook
+   that runs either way.
+4. **A path in `flowFilename` is flattened, not fatal.** Upstream 500s; the
+   fork strips the directory part and saves the bare filename.
+
+## Reporting a vulnerability
+
+Report through **GitHub**, which is the channel a human actually monitors:
+
+- Preferred, for anything sensitive: open a private security advisory at
+  <https://github.com/obliviance/dash-uploader-ng/security/advisories/new>
+- Otherwise: <https://github.com/obliviance/dash-uploader-ng/issues>
+
+Please don't route security reports to the package metadata. `Claude
+(Anthropic)` is credited as a maintainer for the work on this fork, but it is
+an AI assistant and cannot receive or triage reports; **Awwab Mahdi** is the
+human maintainer. Nothing sensitive should be sent anywhere but the two links
+above.

dash_uploader_ng-1.0.0/dash_uploader_ng/__init__.py

@@ -0,0 +1,59 @@
+import os as _os
+import sys as _sys
+import json
+
+import dash as _dash
+
+from dash_uploader_ng.configure_upload import configure_upload
+from dash_uploader_ng.callbacks import callback
+from dash_uploader_ng.httprequesthandler import HttpRequestHandler
+from dash_uploader_ng.upload import Upload
+from dash_uploader_ng.uploadstatus import UploadStatus
+
+# noinspection PyUnresolvedReferences
+from ._build._imports_ import *  # noqa: F403,F401
+from ._build._imports_ import __all__ as build_all
+
+# Defines all exposed APIs of this package.
+__all__ = [
+    "configure_upload",
+    "callback",
+    "HttpRequestHandler",
+    "Upload",
+    "UploadStatus",
+]
+
+if not hasattr(_dash, "development"):
+    print(
+        "Dash was not successfully imported. "
+        "Make sure you don't have a file "
+        'named \n"dash.py" in your current directory.',
+        file=_sys.stderr,
+    )
+    _sys.exit(1)
+
+_basepath = _os.path.dirname(__file__)
+_filepath = _os.path.abspath(_os.path.join(_basepath, "_build", "package-info.json"))
+with open(_filepath) as f:
+    package = json.load(f)
+
+package_name = package["name"].replace(" ", "_").replace("-", "_")
+__version__ = package["version"]
+
+_current_path = _os.path.dirname(_os.path.abspath(__file__))
+
+_this_module = _sys.modules[__name__]
+_js_dist = [
+    {"relative_package_path": "_build/dash_uploader_ng.min.js", "namespace": package_name},
+    {
+        "relative_package_path": "_build/dash_uploader_ng.min.js.map",
+        "namespace": package_name,
+        "dynamic": True,
+    },
+]
+
+_css_dist = []
+
+for _component in build_all:
+    setattr(locals()[_component], "_js_dist", _js_dist)
+    setattr(locals()[_component], "_css_dist", _css_dist)

dash_uploader_ng-1.0.0/dash_uploader_ng/_build/Button.py

@@ -0,0 +1,67 @@
+# AUTO GENERATED FILE - DO NOT EDIT
+
+import typing  # noqa: F401
+from typing_extensions import TypedDict, NotRequired, Literal # noqa: F401
+from dash.development.base_component import Component, _explicitize_args
+try:
+    from dash.types import NumberType  # noqa: F401
+except ImportError:
+    # Backwards compatibility for dash<=4.1.0
+    if typing.TYPE_CHECKING:
+        raise
+    NumberType = typing.Union[  # noqa: F401
+        typing.SupportsFloat, typing.SupportsInt, typing.SupportsComplex
+    ]
+
+ComponentSingleType = typing.Union[str, int, float, Component, None]
+ComponentType = typing.Union[
+    ComponentSingleType,
+    typing.Sequence[ComponentSingleType],
+]
+
+
+class Button(Component):
+    """A Button component.
+A Button component. 
+ Used as a part of Upload component.
+
+Keyword arguments:
+
+- btnClass (string; default 'dash-uploader-btn'):
+    The CSS class for the button.
+
+- disabled (boolean; default False):
+    Is disabled, the component is not shown.
+
+- isUploading (boolean; default False):
+    Is True, the parent component  has upload in progress.
+
+- text (string; default ''):
+    The text on the button."""
+    _children_props: typing.List[str] = []
+    _base_nodes = ['children']
+    _namespace = 'dash_uploader_ng'
+    _type = 'Button'
+
+
+    def __init__(
+        self,
+        text: typing.Optional[str] = None,
+        btnClass: typing.Optional[str] = None,
+        onClick: typing.Optional[typing.Any] = None,
+        disabled: typing.Optional[bool] = None,
+        isUploading: typing.Optional[bool] = None,
+        **kwargs
+    ):
+        self._prop_names = ['btnClass', 'disabled', 'isUploading', 'text']
+        self._valid_wildcard_attributes =            []
+        self.available_properties = ['btnClass', 'disabled', 'isUploading', 'text']
+        self.available_wildcard_properties =            []
+        _explicit_args = kwargs.pop('_explicit_args')
+        _locals = locals()
+        _locals.update(kwargs)  # For wildcard attrs and excess named props
+        args = {k: _locals[k] for k in _explicit_args}
+
+        super(Button, self).__init__(**args)
+
+setattr(Button, "__init__", _explicitize_args(Button.__init__))

dash_uploader_ng-1.0.0/dash_uploader_ng/_build/ProgressBar.py

@@ -0,0 +1,58 @@
+# AUTO GENERATED FILE - DO NOT EDIT
+
+import typing  # noqa: F401
+from typing_extensions import TypedDict, NotRequired, Literal # noqa: F401
+from dash.development.base_component import Component, _explicitize_args
+try:
+    from dash.types import NumberType  # noqa: F401
+except ImportError:
+    # Backwards compatibility for dash<=4.1.0
+    if typing.TYPE_CHECKING:
+        raise
+    NumberType = typing.Union[  # noqa: F401
+        typing.SupportsFloat, typing.SupportsInt, typing.SupportsComplex
+    ]
+
+ComponentSingleType = typing.Union[str, int, float, Component, None]
+ComponentType = typing.Union[
+    ComponentSingleType,
+    typing.Sequence[ComponentSingleType],
+]
+
+
+class ProgressBar(Component):
+    """A ProgressBar component.
+A ProgressBar component. 
+ Used as a part of Upload component.
+
+Keyword arguments:
+
+- isUploading (boolean; default False):
+    The upload status (boolean).
+
+- progressBar (number; default 0):
+    The progressbar value."""
+    _children_props: typing.List[str] = []
+    _base_nodes = ['children']
+    _namespace = 'dash_uploader_ng'
+    _type = 'ProgressBar'
+
+
+    def __init__(
+        self,
+        progressBar: typing.Optional[NumberType] = None,
+        isUploading: typing.Optional[bool] = None,
+        **kwargs
+    ):
+        self._prop_names = ['isUploading', 'progressBar']
+        self._valid_wildcard_attributes =            []
+        self.available_properties = ['isUploading', 'progressBar']
+        self.available_wildcard_properties =            []
+        _explicit_args = kwargs.pop('_explicit_args')
+        _locals = locals()
+        _locals.update(kwargs)  # For wildcard attrs and excess named props
+        args = {k: _locals[k] for k in _explicit_args}
+
+        super(ProgressBar, self).__init__(**args)
+
+setattr(ProgressBar, "__init__", _explicitize_args(ProgressBar.__init__))