Gathering detailed insights and metrics for ag-grid
Gathering detailed insights and metrics for ag-grid
The best JavaScript Data Table for building Enterprise Applications. Supports React / Angular / Vue / Plain JavaScript.
Installations
npm install ag-gridDeveloper Guide
BETA
Typescript
No
Module System
CommonJS
Node Version
8.11.2
NPM Version
6.0.1
Releases
251
Languages
8
TypeScript
SCSS
JavaScript
CSS
Shell
Vue
HTML
sed
TypeScript (92.91%)
SCSS (3.18%)
JavaScript (1.81%)
CSS (1.5%)
Shell (0.45%)
Vue (0.1%)
HTML (0.04%)
sed (0.01%)
Developer
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
NOASSERTION License
14,171 Stars
44,054 Commits
1,993 Forks
216 Watchers
790 Branches
144 Contributors
Updated on Jul 12, 2025
Maintainers
2
Package Meta Information
Latest Version
18.1.2
Package Id
ag-grid@18.1.2
Size
2.10 MB
NPM Version
6.0.1
Node Version
8.11.2
Published on
Jul 25, 2018
Total Downloads
Cumulative downloads
Total Downloads
NaN
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dev Dependencies
41
autoprefixercache-loadercss-loaderdelextract-text-webpack-pluginfile-loadergulpgulp-cleangulp-filtergulp-foreachgulp-headergulp-jasminegulp-postcssgulp-renamegulp-replacegulp-sassgulp-sourcemapsgulp-stylusgulp-tsdgulp-typescriptgulp-uglifyimage-webpack-loaderjasmine-corejson-stable-stringifymerge2nibnode-sasspostcss-loaderpostcss-scsspostcss-svgosass-loaderstyle-loaderstylussvg-colorize-loadertslinttypescripturl-loadervinyl-buffervinyl-namedwebpackwebpack-stream
ag-Grid
ag-Grid is a fully-featured and highly customizable JavaScript data grid. It delivers outstanding performance, has no 3rd party dependencies and integrates smoothly with all major JavaScript frameworks. Here's how our grid looks like with multiple filters and grouping enabled:
Features
Besides the standard set of features you'd expect from any grid:
- Column Interactions (resize, reorder, and pin columns)
- Pagination
- Sorting
- Row Selection
Here are some of the features that make ag-Grid stand out:
- Grouping / Aggregation*
- Custom Filtering
- In-place Cell Editing
- Records Lazy Loading *
- Server-Side Records Operations *
- Live Stream Updates
- Hierarchical Data Support & Tree View *
- Customizable Appearance
- Customizable Cell Contents
- Excel-like Pivoting *
- State Persistence
- Keyboard navigation
- Data Export to CSV
- Data Export to Excel *
- Row Reordering
- Copy / Paste
- Column Spanning
- Pinned Rows
- Full Width Rows
* The features marked with an asterisk are available in the enterprise version only.
Check out developers documentation for a complete list of features or visit our official docs for tutorials and feature demos.
Looking for a framework specific solution?
- Get Started with AngularJS
- Get Started with Angular
- Get Started with React
- Get Started with Vue
- Get Started with WebComponents
Usage Overview
Install dependencies
$ npm i --save ag-grid
Add a placeholder to HTML
<div id="myGrid" style="height: 150px;width: 600px" class="ag-theme-balham"></div>
Import the grid and styles
import {Grid} from "ag-grid/main";
import "ag-grid/dist/styles/ag-grid.css";
import "ag-grid/dist/styles/ag-theme-balham.css";
Set configuration
const gridOptions = {
columnDefs: [
{headerName: 'Make', field: 'make'},
{headerName: 'Model', field: 'model'},
{headerName: 'Price', field: 'price'}
],
rowData: [
{make: 'Toyota', model: 'Celica', price: 35000},
{make: 'Ford', model: 'Mondeo', price: 32000},
{make: 'Porsche', model: 'Boxter', price: 72000}
]
};
Initialize the grid
let eGridDiv = document.querySelector('#myGrid');
new Grid(eGridDiv, this.gridOptions);
For more information on how to integrate the grid into your project see TypeScript - Building with Webpack 2.
Issue Reporting
If you have found a bug, please report them at this repository issues section. If you're using Enterprise version please use the private ticketing system to do that. For more information on support check out our dedicated page.
Asking Questions
Look for similar problems on StackOverflow using the ag-grid tag. If nothing seems related, post a new message there. Do not use GitHub issues to ask questions.
Contributing
ag-Grid is developed by a team of co-located developers in London. If you want to join the team check out our jobs listing or send your application to info@ag-grid.com.
License
This project is licensed under the MIT license. See the LICENSE file for more info.
High
0/10
Summary
ag-grid Cross-Site Scripting vulnerability
Affected Versions
< 14.0.0
Patched Versions
14.0.0
Moderate
6.1/10
Summary
XSS via Angular Expression in ag-grid
Affected Versions
<= 18.1.3-beta.1
Reason
30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Reason
all changesets reviewed
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
30 out of 30 merged PRs checked by a CI test -- score normalized to 10
Reason
project has 16 contributing companies or organizations
Details
- Info: found contributions from: acceleratech, ag grid, ag-grid, aggrid, dark reader ltd, darkreader, dev-ua, forest in the tree, foundersandcoders, j.p. morgan, making good software ltd, nlkit, nlkitai, pebblecode, shopavel, ukrainian-github
Reason
license file detected
Details
- Info: project has a license file: LICENSE.txt:0
- Warn: project license file does not contain an FSF or OSI license.
Reason
2 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-67mh-4wv8-2f99
- Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
Reason
2 out of the last 5 releases have a total of 2 signed artifacts.
Details
- Info: signed release artifact: @ag-grid-community-locale.tgz.sig: https://github.com/ag-grid/ag-grid/releases/tag/release-34.0.1
- Info: signed release artifact: @ag-grid-community-locale.tgz.sig: https://github.com/ag-grid/ag-grid/releases/tag/release-34.0.0
- Warn: release artifact v32.3.8 not signed: https://api.github.com/repos/ag-grid/ag-grid/releases/224216217
- Warn: release artifact v33.3.2 not signed: https://api.github.com/repos/ag-grid/ag-grid/releases/222986070
- Warn: release artifact v33.3.1 not signed: https://api.github.com/repos/ag-grid/ag-grid/releases/221451469
- Warn: release artifact release-34.0.1 does not have provenance: https://api.github.com/repos/ag-grid/ag-grid/releases/230773930
- Warn: release artifact release-34.0.0 does not have provenance: https://api.github.com/repos/ag-grid/ag-grid/releases/227712950
- Warn: release artifact v32.3.8 does not have provenance: https://api.github.com/repos/ag-grid/ag-grid/releases/224216217
- Warn: release artifact v33.3.2 does not have provenance: https://api.github.com/repos/ag-grid/ag-grid/releases/222986070
- Warn: release artifact v33.3.1 does not have provenance: https://api.github.com/repos/ag-grid/ag-grid/releases/221451469
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: jobLevel 'contents' permission set to 'write': .github/workflows/ci.yml:454
- Info: jobLevel 'actions' permission set to 'read': .github/workflows/ci.yml:455
- Warn: jobLevel 'checks' permission set to 'write': .github/workflows/ci.yml:456
- Info: topLevel 'contents' permission set to 'read': .github/workflows/accessibility.yml:40
- Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:61
- Info: topLevel 'actions' permission set to 'read': .github/workflows/ci.yml:62
- Warn: no topLevel permission defined: .github/workflows/csp.yml:1
- Warn: no topLevel permission defined: .github/workflows/doc-tests.yml:1
- Warn: topLevel 'contents' permission set to 'write': .github/workflows/full-clean-build.yml:24
- Warn: topLevel 'actions' permission set to 'write': .github/workflows/full-clean-build.yml:25
- Info: topLevel 'contents' permission set to 'read': .github/workflows/performance.yml:42
- Info: topLevel permissions set to 'read-all': .github/workflows/scorecard.yml:18
- Info: topLevel 'contents' permission set to 'read': .github/workflows/security.yml:20
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
no update tool detected
Details
- Warn: no dependency update tool configurations found
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Info: Possibly incomplete results: error parsing shell code: unclosed here-document 'EOF': scripts/ci/substituteAgChartsTypesScene.sh:0
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/accessibility.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/accessibility.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/accessibility.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/accessibility.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/accessibility.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/accessibility.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/accessibility.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/accessibility.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/accessibility.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/accessibility.yml/latest?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/accessibility.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/accessibility.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/accessibility.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/accessibility.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/accessibility.yml:203: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/accessibility.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:172: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:193: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:228: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:249: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:254: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:270: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:290: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:295: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:316: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:336: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:341: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:373: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:393: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:398: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:428: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:433: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:460: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:475: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:489: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:549: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:557: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/csp.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/csp.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/csp.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/csp.yml/latest?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/csp.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/csp.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:257: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:262: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:268: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:279: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:326: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:177: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:193: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:127: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/full-clean-build.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/full-clean-build.yml/latest?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/full-clean-build.yml:166: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/full-clean-build.yml/latest?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/full-clean-build.yml:184: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/full-clean-build.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/full-clean-build.yml:210: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/full-clean-build.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/full-clean-build.yml:254: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/full-clean-build.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/full-clean-build.yml:262: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/full-clean-build.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/performance.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/performance.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/performance.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/performance.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/performance.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/performance.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/performance.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/performance.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/performance.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/performance.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/performance.yml:160: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/performance.yml/latest?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/performance.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/performance.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/performance.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/performance.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/scorecard.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/scorecard.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/security.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/security.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/security.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/security.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/security.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/security.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/security.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:127: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/security.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:173: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/security.yml/latest?enable=pin
- Warn: containerImage not pinned by hash: external/ag-shared/scripts/gha-debug/Dockerfile:1: pin your Docker image by updating myoung34/github-runner:latest to myoung34/github-runner:latest@sha256:bc59f14f9ccf9d322ff44c8bfbca8062bb72589c723dd6bc74dcc088081e3298
- Warn: npmCommand not pinned by hash: testing/angular-package-tests/run.sh:12
- Warn: npmCommand not pinned by hash: testing/angular-package-tests/run.sh:15
- Warn: npmCommand not pinned by hash: testing/react-package-tests/run-basic.sh:14
- Warn: npmCommand not pinned by hash: testing/react-package-tests/run-basic.sh:15
- Warn: npmCommand not pinned by hash: testing/react-package-tests/run-next-js.sh:13
- Warn: npmCommand not pinned by hash: testing/shared/run.sh:136
- Warn: npmCommand not pinned by hash: testing/shared/run.sh:139
- Warn: npmCommand not pinned by hash: testing/vue-package-tests/run.sh:14
- Warn: npmCommand not pinned by hash: .github/workflows/doc-tests.yml:110
- Info: 2 out of 67 GitHub-owned GitHubAction dependencies pinned
- Info: 1 out of 10 third-party GitHubAction dependencies pinned
- Info: 0 out of 1 containerImage dependencies pinned
- Info: 0 out of 9 npmCommand dependencies pinned
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 30 are checked with a SAST tool
Score
5.2
/10
Last Scanned on 2025-07-12T10:05:52Z
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More