feat: add Export to spreadsheet button on packages page

- Export dropdown with language scope (current / all) and detail level
  (catalog only / catalog + CVE summary / full CVE rows)
- Generates multi-tab .xlsx client-side via SheetJS (lazy-loaded chunk)
- "Open in Sheets" button scaffolded but hidden until VITE_GOOGLE_CLIENT_ID
  is set; full setup guide added to ExportFeaturePlan.md

Author: martinPavesio

.env.example

@@ -3,3 +3,9 @@ CATALOG_TOKEN=your_token_here
 CATALOG_INDEX_ID=your-index-uuid-here
 NPM_ORG_ID=your-org-id-here
 NPM_BRIDGE_TOKEN=your_token_here
+
+# Optional: enables "Open in Sheets" button in the Export dropdown.
+# Create an OAuth 2.0 client ID at console.cloud.google.com
+# (Application type: Web, add localhost:5173 + your gh-pages domain as authorized origins).
+# Enable the Google Drive API for the same project.
+VITE_GOOGLE_CLIENT_ID=

package-lock.json

@@ -11,7 +11,8 @@
   "dependencies": {
     "react": "^18.3.1",
     "react-dom": "^18.3.1",
-    "react-router-dom": "^6.26.0"
+    "react-router-dom": "^6.26.0",
+    "xlsx": "^0.18.5"
   },
   "devDependencies": {
     "@types/react": "^18.3.1",

package.json

@@ -0,0 +1,145 @@
+.wrap {
+  position: relative;
+}
+
+.trigger {
+  display: inline-flex;
+  align-items: center;
+  gap: 6px;
+  padding: 6px 14px;
+  border-radius: 6px;
+  border: 1px solid var(--border-strong);
+  background: var(--bg-card);
+  color: var(--text-secondary);
+  font-family: 'Poppins', sans-serif;
+  font-size: 12px;
+  font-weight: 600;
+  cursor: pointer;
+  transition: all 0.15s;
+  white-space: nowrap;
+}
+
+.trigger:hover {
+  border-color: var(--accent);
+  color: var(--accent);
+  background: var(--bg-accent);
+}
+
+.panel {
+  position: absolute;
+  top: calc(100% + 6px);
+  left: 0;
+  z-index: 200;
+  background: var(--bg-card);
+  border: 1px solid var(--border-strong);
+  border-radius: 10px;
+  box-shadow: 0 8px 28px rgba(0, 0, 0, 0.15);
+  padding: 14px;
+  min-width: 230px;
+  display: flex;
+  flex-direction: column;
+  gap: 10px;
+}
+
+.group {
+  display: flex;
+  flex-direction: column;
+  gap: 6px;
+}
+
+.groupLabel {
+  font-size: 10px;
+  font-weight: 700;
+  text-transform: uppercase;
+  letter-spacing: 0.08em;
+  color: var(--text-secondary);
+  margin-bottom: 2px;
+}
+
+.option {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  font-size: 12px;
+  color: var(--text-primary);
+  cursor: pointer;
+  padding: 1px 0;
+  user-select: none;
+}
+
+.option input[type='radio'] {
+  accent-color: var(--accent);
+  cursor: pointer;
+}
+
+.divider {
+  border: none;
+  border-top: 1px solid var(--border);
+  margin: 2px 0;
+}
+
+.actions {
+  display: flex;
+  flex-direction: column;
+  gap: 7px;
+  margin-top: 2px;
+}
+
+.downloadBtn {
+  width: 100%;
+  padding: 8px;
+  border-radius: 6px;
+  border: none;
+  background: var(--accent);
+  color: #fff;
+  font-family: 'Poppins', sans-serif;
+  font-size: 12px;
+  font-weight: 700;
+  cursor: pointer;
+  transition: opacity 0.15s;
+  letter-spacing: 0.02em;
+}
+
+.downloadBtn:hover:not(:disabled) {
+  opacity: 0.88;
+}
+
+.downloadBtn:disabled {
+  opacity: 0.5;
+  cursor: not-allowed;
+}
+
+.sheetsBtn {
+  width: 100%;
+  padding: 7px 8px;
+  border-radius: 6px;
+  border: 1px solid var(--border-strong);
+  background: var(--bg-card);
+  color: var(--text-primary);
+  font-family: 'Poppins', sans-serif;
+  font-size: 12px;
+  font-weight: 600;
+  cursor: pointer;
+  transition: border-color 0.15s, background 0.15s;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  gap: 7px;
+  letter-spacing: 0.02em;
+}
+
+.sheetsBtn:hover:not(:disabled) {
+  border-color: #0f9d58;
+  color: #0f9d58;
+  background: rgba(15, 157, 88, 0.06);
+}
+
+.sheetsBtn:disabled {
+  opacity: 0.5;
+  cursor: not-allowed;
+}
+
+.sheetsBtnError {
+  border-color: var(--status-vl-bd);
+  color: var(--status-vl-tx);
+}