Gathering detailed insights and metrics for ag-grid-community
Gathering detailed insights and metrics for ag-grid-community
The best JavaScript Data Table for building Enterprise Applications. Supports React / Angular / Vue / Plain JavaScript.
Installations
npm install ag-grid-communityDeveloper Guide
BETA
Typescript
Yes
Module System
CommonJS, ESM
Node Version
20.11.1
NPM Version
10.2.4
Releases
251
Languages
8
TypeScript
SCSS
JavaScript
CSS
Shell
Vue
HTML
sed
TypeScript (92.91%)
SCSS (3.18%)
JavaScript (1.81%)
CSS (1.5%)
Shell (0.45%)
Vue (0.1%)
HTML (0.04%)
sed (0.01%)
Developer
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
NOASSERTION License
14,162 Stars
44,036 Commits
1,992 Forks
216 Watchers
794 Branches
144 Contributors
Updated on Jul 10, 2025
Maintainers
4
Package Meta Information
Latest Version
34.0.1
Package Id
ag-grid-community@34.0.1
Unpacked Size
18.98 MB
Size
4.03 MB
File Count
642
NPM Version
10.2.4
Node Version
20.11.1
Published on
Jul 08, 2025
Total Downloads
Cumulative downloads
Total Downloads
NaN
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
1
JavaScript Data Grid | JavaScript Table
AG Grid is a fully-featured and highly customizable JavaScript Data Grid. It delivers outstanding performance, has no third-party dependencies and comes with support for 
React, 
Angular and 
Vue.
📖 Overview
Table of Contents
- [JavaScript Data Grid | JavaScript Table]
AG Grid is available in two versions: Community & Enterprise.
ag-grid-communityis free, available under the MIT license, and comes with all of the core features expected from a JavaScript Data Grid, including Sorting, Filtering, Pagination, Editing, Custom Components, Theming and more.ag-grid-enterpriseis available under a commercial license and comes with advanced features, like Integrated Charting, Row Grouping, Aggregation, Pivoting, Master/Detail, Server-side Row Model, and Exporting in addition to dedicated support from our Engineering team.
Features
| Feature | AG Grid Community | AG Grid Enterprise |
|---|---|---|
| Filtering | ✅ | ✅ (Advanced) |
| Sorting | ✅ | ✅ |
| Cell Editing | ✅ | ✅ |
| CSV Export | ✅ | ✅ |
| Drag & Drop | ✅ | ✅ |
| Themes and Styling | ✅ | ✅ |
| Selection | ✅ | ✅ |
| Accessibility | ✅ | ✅ |
| Infinite Scrolling | ✅ | ✅ |
| Pagination | ✅ | ✅ |
| Server-Side Data | ✅ | ✅ (Advanced) |
| Custom Components | ✅ | ✅ |
| Integrated Charting | ❌ | ✅ |
| Range Selection | ❌ | ✅ |
| Row Grouping and Aggregation | ❌ | ✅ |
| Pivoting | ❌ | ✅ |
| Excel Export | ❌ | ✅ |
| Clipboard Operations | ❌ | ✅ |
| Master/Detail | ❌ | ✅ |
| Tree Data | ❌ | ✅ |
| Column Menu | ❌ | ✅ |
| Context Menu | ❌ | ✅ |
| Tool Panels | ❌ | ✅ |
| Support | ❌ | ✅ |
ℹ️ Note:
Visit the Pricing page for a full comparison.
Examples
We've created several demos to showcase AG Grid's rich feature set across different use cases. See them in action below, or interact with them on our Demo page.
🏦 Financial Demo
Financial data example featuring live updates and sparklines:
⚡️ Quick Start
AG Grid is easy to set up - all you need to do is provide your data and define your column structure. Read on for vanilla JavaScript installation instructions, or refer to our framework-specific guides for React, Angular and Vue.
Installation
1$ npm install --save ag-grid-community
Setup
1. Provide a Container
Load the AG Grid library and create a container div. The div should have a height because the Data Grid will fill the size of the parent container:
1<html lang="en"> 2 <head> 3 <!-- Includes all JS & CSS for the JavaScript Data Grid --> 4 <script src="https://cdn.jsdelivr.net/npm/ag-grid-community/dist/ag-grid-community.min.js"></script> 5 </head> 6 <body> 7 <!-- Your Data Grid container --> 8 <div id="myGrid" style="height: 500px"></div> 9 </body> 10</html>
2. Instantiating the JavaScript Data Grid
Create the Data Grid inside of your container div using createGrid.
1// Grid Options: Contains all of the Data Grid configurations 2const gridOptions = {}; 3 4// Your Javascript code to create the Data Grid 5const myGridElement = document.querySelector('#myGrid'); 6agGrid.createGrid(myGridElement, gridOptions);
3. Define Rows and Columns
1// Grid Options: Contains all of the Data Grid configurations 2const gridOptions = { 3 // Row Data: The data to be displayed. 4 rowData: [ 5 { make: 'Tesla', model: 'Model Y', price: 64950, electric: true }, 6 { make: 'Ford', model: 'F-Series', price: 33850, electric: false }, 7 { make: 'Toyota', model: 'Corolla', price: 29600, electric: false }, 8 ], 9 // Column Definitions: Defines the columns to be displayed. 10 columnDefs: [{ field: 'make' }, { field: 'model' }, { field: 'price' }, { field: 'electric' }], 11};
ℹ️ Note:
For more information on building Data Grids with AG Grid, refer to our Documentation.
Seed Projects
We also provide Seed Projects to help you get started with common configurations:
| Environment | Framework |
|---|---|
| Create React App (CRA) | |
| Vite | |
| Create Next App | |
| Vite - TypeScript |  |
| Webpack 5 - TypeScript | |
| Webpack 5 - JavaScript |  |
| Angular CLI | |
| Nuxt | |
| Vite | |
🛠️ Customisations
AG Grid is fully customisable, both in terms of appearance and functionality. There are many ways in which the grid can be customised and we provide a selection of tools to help create those customisations.
Custom Components
You can create your own Custom Components to customise the behaviour of the grid. For example, you can customise how cells are rendered, how values are edited and also create your own filters.
There are a number of different Component Types that you can provide to the grid, including:
- Cell Component: To customise the contents of a cell.
- Header Component: To customise the header of a column and column groups.
- Edit Component: To customise the editing of a cell.
- Filter Component: For custom column filter that appears inside the column menu.
- Floating Filter: For custom column floating filter that appears inside the column menu.
- Date Component: To customise the date selection component in the date filter.
- Loading Component: To customise the loading cell row when using Server Side Row Model.
- Overlay Component: To customise loading and no rows overlay components.
- Status Bar Component: For custom status bar components.
- Tool Panel Component: For custom tool panel components.
- Tooltip Component: For custom cell tooltip components.
- Menu Item Component: To customise the menu items shown in the Column and Context Menus.
To supply a custom cell renderer and filter components to the Grid, create a direct reference to your component within the gridOptions.columnDefs property:
1gridOptions = { 2 columnDefs: [ 3 { 4 field: 'country', // The column to add the component to 5 cellRenderer: CountryCellRenderer, // Your custom cell component 6 filter: CountryFilter, // Your custom filter component 7 }, 8 ], 9};
Themes
AG Grid has 4 themes, each available in light & dark modes:
| Quartz | Material |
|---|---|
|
|
| Alpine | Balham |
|
|
Custom Themes
All AG Grid themes can be customised using the Theming API, or you can create a new theme from scratch with the help of our Theme Builder or Figma Design System.
🌍 Community
Tools & Extensions
AG Grid has a large and active community who have created an ecosystem of 3rd party tools, extensions and utilities to help you build your next project with AG Grid, no matter which language or framework you use:
React
Angular
Vue
Python
Svelte
SolidJS
.NET
Rust
LaravelShowcase
AG Grid is used by 100,000's of developers across the world, from almost every industry. Whilst most of these projects are private, we've curated a selection of open-source projects from different industries where household names use AG Grid, including J.P.Morgan, MongoDB and NASA. Visit our Community Showcase page to learn more.
Stargazers
Founded in 2016, AG Grid has seen a steady rise in popularity and is now the market leader for Data Grids:
🤝 Support
Enterprise Support
AG Grid Enterprise customers have access to dedicated support via ZenDesk, which is monitored by our engineering teams.
Bug Reports
If you have found a bug, please report it in this repository's issues section.
Questions
Look for similar problems on StackOverflow using the ag-grid tag. If nothing seems related, post a new message there. Please do not use GitHub issues to ask questions.
Contributing
AG Grid is developed by a team of co-located developers in London. If you want to join the team send your application to info@ag-grid.com.
⚠️ License
ag-grid-community is licensed under the MIT license.
ag-grid-enterprise has a Commercial license.
See the LICENSE file for more info.
AG Charts
If you've made it this far, you may be interested in our latest project: AG Charts - The best JavaScript Charting library in the world.
Initially built to power Integrated Charts in AG Grid, we open-sourced this project in 2018. Having seen the steady rise in popularity since then, we have decided to invest in AG Charts with a dedicated Enterprise version (ag-charts-enterprise) in addition to our continued support of ag-charts-community.
Follow us to keep up to date with all the latest news from AG Grid:
-black?style=for-the-badge&logo=x){kind=icon}
High
9.8/10
Summary
Prototype pollution in ag-grid-community via the _.mergeDeep function
Affected Versions
< 31.3.4
Patched Versions
31.3.4
Moderate
6.3/10
Summary
ag-grid packages vulnerable to Prototype Pollution
Affected Versions
< 31.3.4
Patched Versions
31.3.4
Moderate
6.3/10
Summary
ag-grid packages vulnerable to Prototype Pollution
Affected Versions
= 32.0.0
Patched Versions
32.0.1
Reason
no dangerous workflow patterns detected
Reason
30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Reason
no binaries found in the repo
Reason
26 out of 26 merged PRs checked by a CI test -- score normalized to 10
Reason
project has 16 contributing companies or organizations
Details
- Info: found contributions from: acceleratech, ag grid, ag-grid, aggrid, dark reader ltd, darkreader, dev-ua, forest in the tree, foundersandcoders, j.p. morgan, making good software ltd, nlkit, nlkitai, pebblecode, shopavel, ukrainian-github
Reason
license file detected
Details
- Info: project has a license file: LICENSE.txt:0
- Warn: project license file does not contain an FSF or OSI license.
Reason
Found 26/30 approved changesets -- score normalized to 8
Reason
2 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-67mh-4wv8-2f99
- Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
Reason
2 out of the last 5 releases have a total of 2 signed artifacts.
Details
- Info: signed release artifact: @ag-grid-community-locale.tgz.sig: https://github.com/ag-grid/ag-grid/releases/tag/release-34.0.1
- Info: signed release artifact: @ag-grid-community-locale.tgz.sig: https://github.com/ag-grid/ag-grid/releases/tag/release-34.0.0
- Warn: release artifact v32.3.8 not signed: https://api.github.com/repos/ag-grid/ag-grid/releases/224216217
- Warn: release artifact v33.3.2 not signed: https://api.github.com/repos/ag-grid/ag-grid/releases/222986070
- Warn: release artifact v33.3.1 not signed: https://api.github.com/repos/ag-grid/ag-grid/releases/221451469
- Warn: release artifact release-34.0.1 does not have provenance: https://api.github.com/repos/ag-grid/ag-grid/releases/230773930
- Warn: release artifact release-34.0.0 does not have provenance: https://api.github.com/repos/ag-grid/ag-grid/releases/227712950
- Warn: release artifact v32.3.8 does not have provenance: https://api.github.com/repos/ag-grid/ag-grid/releases/224216217
- Warn: release artifact v33.3.2 does not have provenance: https://api.github.com/repos/ag-grid/ag-grid/releases/222986070
- Warn: release artifact v33.3.1 does not have provenance: https://api.github.com/repos/ag-grid/ag-grid/releases/221451469
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: jobLevel 'contents' permission set to 'write': .github/workflows/ci.yml:454
- Info: jobLevel 'actions' permission set to 'read': .github/workflows/ci.yml:455
- Warn: jobLevel 'checks' permission set to 'write': .github/workflows/ci.yml:456
- Info: topLevel 'contents' permission set to 'read': .github/workflows/accessibility.yml:26
- Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:61
- Info: topLevel 'actions' permission set to 'read': .github/workflows/ci.yml:62
- Warn: no topLevel permission defined: .github/workflows/csp.yml:1
- Warn: no topLevel permission defined: .github/workflows/doc-tests.yml:1
- Warn: topLevel 'contents' permission set to 'write': .github/workflows/full-clean-build.yml:24
- Warn: topLevel 'actions' permission set to 'write': .github/workflows/full-clean-build.yml:25
- Info: topLevel 'contents' permission set to 'read': .github/workflows/performance.yml:42
- Info: topLevel permissions set to 'read-all': .github/workflows/scorecard.yml:18
- Info: topLevel 'contents' permission set to 'read': .github/workflows/security.yml:9
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
no update tool detected
Details
- Warn: no dependency update tool configurations found
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Info: Possibly incomplete results: error parsing shell code: unclosed here-document 'EOF': scripts/ci/substituteAgChartsTypesScene.sh:0
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/accessibility.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/accessibility.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/accessibility.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/accessibility.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/accessibility.yml:94: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/accessibility.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/accessibility.yml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/accessibility.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/accessibility.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/accessibility.yml/latest?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/accessibility.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/accessibility.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:172: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:193: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:228: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:249: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:254: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:270: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:290: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:295: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:316: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:336: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:341: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:373: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:393: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:398: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:428: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:433: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:460: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:475: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:489: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:549: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:557: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/csp.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/csp.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/csp.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/csp.yml/latest?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/csp.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/csp.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:193: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:177: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:255: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:266: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:277: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:322: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:127: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/full-clean-build.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/full-clean-build.yml/latest?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/full-clean-build.yml:166: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/full-clean-build.yml/latest?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/full-clean-build.yml:184: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/full-clean-build.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/full-clean-build.yml:210: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/full-clean-build.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/full-clean-build.yml:243: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/full-clean-build.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/full-clean-build.yml:251: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/full-clean-build.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/performance.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/performance.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/performance.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/performance.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/performance.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/performance.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/performance.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/performance.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/performance.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/performance.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/performance.yml:160: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/performance.yml/latest?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/performance.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/performance.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/performance.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/performance.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/scorecard.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/scorecard.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/security.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/security.yml/latest?enable=pin
- Warn: containerImage not pinned by hash: external/ag-shared/scripts/gha-debug/Dockerfile:1: pin your Docker image by updating myoung34/github-runner:latest to myoung34/github-runner:latest@sha256:3264c569aca8c9560b4c6b176c62018789a951671a323bad76e16160dfbd2f02
- Warn: npmCommand not pinned by hash: testing/angular-package-tests/run.sh:12
- Warn: npmCommand not pinned by hash: testing/angular-package-tests/run.sh:15
- Warn: npmCommand not pinned by hash: testing/react-package-tests/run-basic.sh:14
- Warn: npmCommand not pinned by hash: testing/react-package-tests/run-basic.sh:15
- Warn: npmCommand not pinned by hash: testing/react-package-tests/run-next-js.sh:13
- Warn: npmCommand not pinned by hash: testing/shared/run.sh:136
- Warn: npmCommand not pinned by hash: testing/shared/run.sh:139
- Warn: npmCommand not pinned by hash: testing/vue-package-tests/run.sh:14
- Warn: npmCommand not pinned by hash: .github/workflows/doc-tests.yml:110
- Info: 2 out of 58 GitHub-owned GitHubAction dependencies pinned
- Info: 1 out of 10 third-party GitHubAction dependencies pinned
- Info: 0 out of 1 containerImage dependencies pinned
- Info: 0 out of 9 npmCommand dependencies pinned
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 26 are checked with a SAST tool
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Score
5
/10
Last Scanned on 2025-07-10T16:05:47Z
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More