Gathering detailed insights and metrics for @progress/kendo-react-upload
Gathering detailed insights and metrics for @progress/kendo-react-upload
Issue tracker - KendoReact http://www.telerik.com/kendo-react-ui/
Installations
npm install @progress/kendo-react-uploadDeveloper Guide
BETA
Typescript
Yes
Module System
CommonJS, ESM
Node Version
22.16.0
NPM Version
10.8.1
Releases
Unable to fetch releases
Languages
3
HTML
Shell
CSS
HTML (63.06%)
Shell (34.76%)
CSS (2.19%)
Developer
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
NOASSERTION License
226 Stars
1,260 Commits
52 Forks
38 Watchers
44 Branches
62 Contributors
Updated on Jun 29, 2025
Maintainers
1
Package Meta Information
Latest Version
11.2.0
Package Id
@progress/kendo-react-upload@11.2.0
Unpacked Size
263.76 kB
Size
54.89 kB
File Count
51
NPM Version
10.8.1
Node Version
22.16.0
Published on
Jul 01, 2025
Total Downloads
Cumulative downloads
Total Downloads
NaN
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
KendoReact Upload Component for React
Important
- This package is а part of KendoReact—an enterprise-grade UI library with 120+ free and premium components.
- It provides a premium KendoReact component. You will need to install a license key when adding the package to your project. For more information, please refer to the KendoReact My License page.
- To receive a license key, you need to either purchase a license or register for a free trial. Doing so indicates that you accept the KendoReact License Agreement.
- The 30-day free trial gives you access to all KendoReact components and their full functionality. Additionally, for the period of your trial, you can use our legendary technical support provided directly by the KendoReact dev team!
Start using KendoReact and speed up your development process!
If you're looking for free React components, check out Get Started with KendoReact Free.
The React Upload component, part of KendoReact, helps users transfer files from their file systems to dedicated server handlers.
React Upload
Among the features which the KendoReact Upload component delivers are:
- Disabled Upload—Completely disable the upload functionality in certain conditions.
- Modes of operation—Control which file types can be uploaded or execute follow-up logic based on certain scenario.
- Credentials and additional data—Send cookies and/or headers for cross-site requests or additional data.
- File processing—Provides different configuration options for controlling the way files are processed during upload. For example, automatic upload, single or multiple files upload, or upload of batches of files.
- File restrictions—Restrict certain file uploads, based on their file size or extension.
- Dragging and dropping—For easy use and delightful experiences, the component has built-in drag and drop functionality.
- Custom renderer—You can apply your own look and feel to the uploaded files list.
- External Drop Zone—The ExternalDropZone helps users to drag and drop files from their file systems to a dedicated user interface. The files are then sent to the specified server handlers, which are configured to receive them.
- Globalization—By using the available globalization options in KendoReact, you can translate the Upload messages by adapting them to specific culture locales.
- Keyboard navigation—Built-in keyboard shortcuts for usability and navigation in the component.
- Theme support—The KendoReact Upload, as well as all 100+ components in the KendoReact suite, are styled in three polished themes (Bootstrap, Material, and Default) and can be further customized to match your specific design guidelines.
Support Options
For any issues you might encounter while working with the KendoReact Upload, use any of the available support channels:
- Industry-leading technical support—KendoReact paid license holders and users with an active (free) trial license can take advantage of our outstanding customer support. To submit a ticket, use the dedicated KendoReact support system.
- Product forums—The KendoReact forums are part of the free support you can get from the community and from the KendoReact team.
- Feedback portal—The KendoReact feedback portal is where you can request and vote for new features to be added.
Resources
- Getting Started with KendoReact
- Get Started with KendoReact Free
- Get Started with the KendoReact Upload
- API Reference of the KendoReact Upload
- KendoReact Roadmap
- Blogs
- Demos, documentation, and component reference
- KendoReact pricing and licensing
- Changelog
High-level component overview pages
Copyright © 2025 Progress Software Corporation and/or its subsidiaries or affiliates. All Rights Reserved.
Progress, Telerik, and certain product names used herein are trademarks or registered trademarks of Progress Software Corporation and/or one of its subsidiaries or affiliates in the U.S. and/or other countries.
No vulnerabilities found.
Reason
30 commit(s) and 7 issue activity found in the last 90 days -- score normalized to 10
Reason
all changesets reviewed
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENSE.md:0
- Warn: project license file does not contain an FSF or OSI license.
Reason
branch protection is not maximal on development and all release branches
Details
- Info: 'allow deletion' disabled on branch 'master'
- Info: 'force pushes' disabled on branch 'master'
- Warn: 'branch protection settings apply to administrators' is disabled on branch 'master'
- Warn: 'stale review dismissal' is disabled on branch 'master'
- Warn: required approving review count is 1 on branch 'master'
- Warn: codeowners review is required - but no codeowners file found in repo
- Warn: 'last push approval' is disabled on branch 'master'
- Warn: no status checks found to merge onto branch 'master'
- Info: PRs are required in order to make changes on branch 'master'
Reason
dependency not pinned by hash detected -- score normalized to 4
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cd.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/telerik/kendo-react/cd.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cd.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/telerik/kendo-react/cd.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/cd.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/telerik/kendo-react/cd.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/telerik/kendo-react/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/telerik/kendo-react/ci.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/telerik/kendo-react/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-kb.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/telerik/kendo-react/publish-kb.yml/master?enable=pin
- Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:73
- Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:94
- Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:101
- Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:136
- Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:144
- Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:146
- Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:153
- Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:160
- Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:167
- Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:174
- Info: 0 out of 5 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 2 third-party GitHubAction dependencies pinned
- Info: 11 out of 21 npmCommand dependencies pinned
Reason
6 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
- Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh
- Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42
- Warn: Project is vulnerable to: GHSA-4v9v-hfq4-rm2v
- Warn: Project is vulnerable to: GHSA-9jgg-88mc-972h
- Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/cd.yml:1
- Warn: no topLevel permission defined: .github/workflows/ci.yml:1
- Warn: topLevel 'contents' permission set to 'write': .github/workflows/publish-kb.yml:9
- Info: no jobLevel write permissions found
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 30 are checked with a SAST tool
Score
5.4
/10
Last Scanned on 2025-07-07
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More