Gathering detailed insights and metrics for ag-grid-react
Gathering detailed insights and metrics for ag-grid-react
The best JavaScript Data Table for building Enterprise Applications. Supports React / Angular / Vue / Plain JavaScript.
Installations
npm install ag-grid-reactDeveloper Guide
BETA
Typescript
Yes
Module System
CommonJS, ESM
Node Version
20.11.1
NPM Version
10.2.4
Releases
252
Languages
8
TypeScript
SCSS
JavaScript
CSS
Shell
Vue
HTML
sed
TypeScript (92.93%)
SCSS (3.17%)
JavaScript (1.81%)
CSS (1.5%)
Shell (0.45%)
Vue (0.1%)
HTML (0.04%)
sed (0.01%)
Developer
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
NOASSERTION License
14,185 Stars
44,117 Commits
1,995 Forks
216 Watchers
781 Branches
144 Contributors
Updated on Jul 17, 2025
Maintainers
4
Package Meta Information
Latest Version
34.0.2
Package Id
ag-grid-react@34.0.2
Unpacked Size
633.64 kB
Size
139.27 kB
File Count
66
NPM Version
10.2.4
Node Version
20.11.1
Published on
Jul 15, 2025
Total Downloads
Cumulative downloads
Total Downloads
NaN
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
React Data Grid | React Table
AG Grid is a fully-featured and highly customizable React Data Grid. It delivers outstanding performance and has no third-party dependencies.
📖 Overview
Table of Contents
AG Grid is available in two versions: Community & Enterprise.
ag-grid-communityis free, available under the MIT license, and comes with all of the core features expected from a React Data Grid, including Sorting, Filtering, Pagination, Editing, Custom Components, Theming and more.ag-grid-enterpriseis available under a commercial license and comes with advanced features, like Integrated Charting, Row Grouping, Aggregation, Pivoting, Master/Detail, Server-side Row Model, and Exporting in addition to dedicated support from our Engineering team.
Features
| Feature | AG Grid Community | AG Grid Enterprise |
|---|---|---|
| Filtering | ✅ | ✅ (Advanced) |
| Sorting | ✅ | ✅ |
| Cell Editing | ✅ | ✅ |
| CSV Export | ✅ | ✅ |
| Drag & Drop | ✅ | ✅ |
| Themes and Styling | ✅ | ✅ |
| Selection | ✅ | ✅ |
| Accessibility | ✅ | ✅ |
| Infinite Scrolling | ✅ | ✅ |
| Pagination | ✅ | ✅ |
| Server-Side Data | ✅ | ✅ (Advanced) |
| Custom Components | ✅ | ✅ |
| Integrated Charting | ❌ | ✅ |
| Range Selection | ❌ | ✅ |
| Row Grouping and Aggregation | ❌ | ✅ |
| Pivoting | ❌ | ✅ |
| Excel Export | ❌ | ✅ |
| Clipboard Operations | ❌ | ✅ |
| Master/Detail | ❌ | ✅ |
| Tree Data | ❌ | ✅ |
| Column Menu | ❌ | ✅ |
| Context Menu | ❌ | ✅ |
| Tool Panels | ❌ | ✅ |
| Support | ❌ | ✅ |
ℹ️ Note:
Visit the Pricing page for a full comparison.
Examples
We've created several demos to showcase AG Grid's rich feature set across different use cases. See them in action below, or interact with them on our Demo page.
🏦 Financial Demo
Financial data example featuring live updates and sparklines:
⚡️ Quick Start
AG Grid is easy to set up - all you need to do is provide your data and define your column structure.
Installation
1$ npm install --save ag-grid-react
Setup
1. Register Modules
Register the AllCommunityModule to access all Community features:
1import { AllCommunityModule, ModuleRegistry } from 'ag-grid-community'; 2 3// Register all Community features 4ModuleRegistry.registerModules([AllCommunityModule]);
ℹ️ Note:
To minimize bundle size, only register the modules you want to use. See the Modules page for more information.
2. Import the React Data Grid
1// React Data Grid Component 2import { AgGridReact } from 'ag-grid-react';
3. Define Rows and Columns
1const GridExample = () => { 2 // Row Data: The data to be displayed. 3 const [rowData, setRowData] = useState([ 4 { make: 'Tesla', model: 'Model Y', price: 64950, electric: true }, 5 { make: 'Ford', model: 'F-Series', price: 33850, electric: false }, 6 { make: 'Toyota', model: 'Corolla', price: 29600, electric: false }, 7 ]); 8 9 // Column Definitions: Defines the columns to be displayed. 10 const [colDefs, setColDefs] = useState([ 11 { field: 'make' }, 12 { field: 'model' }, 13 { field: 'price' }, 14 { field: 'electric' }, 15 ]); 16 17 // ... 18};
4. React Data Grid Component
1return ( 2 // set a height on the parent div because the grid fills the available space 3 <div style={{ height: 500 }}> 4 <AgGridReact rowData={rowData} columnDefs={colDefs} /> 5 </div> 6);
ℹ️ Note:
For more information on building Data Grids with AG Grid, refer to our Documentation.
Seed Projects
We also provide Seed Projects to help you get started with common configurations:
| Environment | Framework |
|---|---|
| Create React App (CRA) |  |
| Vite | |
| Create Next App | |
| Vite - TypeScript |  |
| Webpack 5 - TypeScript | |
| Webpack 5 - React |  |
| Angular CLI |  |
| Nuxt |  |
| Vite | |
🛠️ Customisations
AG Grid is fully customisable, both in terms of appearance and functionality. There are many ways in which the grid can be customised and we provide a selection of tools to help create those customisations.
Custom Components
You can create your own Custom Components to customise the behaviour of the grid. For example, you can customise how cells are rendered, how values are edited and also create your own filters.
There are a number of different Component Types that you can provide to the grid, including:
- Cell Component: To customise the contents of a cell.
- Header Component: To customise the header of a column and column groups.
- Edit Component: To customise the editing of a cell.
- Filter Component: For custom column filter that appears inside the column menu.
- Floating Filter: For custom column floating filter that appears inside the column menu.
- Date Component: To customise the date selection component in the date filter.
- Loading Component: To customise the loading cell row when using Server Side Row Model.
- Overlay Component: To customise loading and no rows overlay components.
- Status Bar Component: For custom status bar components.
- Tool Panel Component: For custom tool panel components.
- Tooltip Component: For custom cell tooltip components.
- Menu Item Component: To customise the menu items shown in the Column and Context Menus.
To supply a custom cell renderer and filter components to the Grid, create a direct reference to your component within the gridOptions.columnDefs property:
1gridOptions = { 2 columnDefs: [ 3 { 4 field: 'country', // The column to add the component to 5 cellRenderer: CountryCellRenderer, // Your custom cell component 6 filter: CountryFilter, // Your custom filter component 7 }, 8 ], 9};
Themes
AG Grid has 4 themes, each available in light & dark modes:
| Quartz | Material |
|---|---|
|
|
| Alpine | Balham |
|
|
Custom Themes
All AG Grid themes can be customised using the Theming API, or you can create a new theme from scratch with the help of our Theme Builder or Figma Design System.
🌍 Community
Tools & Extensions
AG Grid has a large and active community who have created an ecosystem of 3rd party tools, extensions and utilities to help you build your next project with AG Grid, no matter which language or framework you use:
React
Angular
Vue
Python
Svelte
SolidJS
.NET
Rust
LaravelShowcase
AG Grid is used by 100,000's of developers across the world, from almost every industry. Whilst most of these projects are private, we've curated a selection of open-source projects from different industries where household names use AG Grid, including J.P.Morgan, MongoDB and NASA. Visit our Community Showcase page to learn more.
Stargazers
Founded in 2016, AG Grid has seen a steady rise in popularity and is now the market leader for Data Grids:
🤝 Support
Enterprise Support
AG Grid Enterprise customers have access to dedicated support via ZenDesk, which is monitored by our engineering teams.
Bug Reports
If you have found a bug, please report it in this repository's issues section.
Questions
Look for similar problems on StackOverflow using the ag-grid tag. If nothing seems related, post a new message there. Please do not use GitHub issues to ask questions.
Contributing
AG Grid is developed by a team of co-located developers in London. If you want to join the team send your application to info@ag-grid.com.
⚠️ License
ag-grid-community is licensed under the MIT license.
ag-grid-enterprise has a Commercial license.
See the LICENSE file for more info.
AG Charts
If you've made it this far, you may be interested in our latest project: AG Charts - The best React Charting library in the world.
Initially built to power Integrated Charts in AG Grid, we open-sourced this project in 2018. Having seen the steady rise in popularity since then, we have decided to invest in AG Charts with a dedicated Enterprise version (ag-charts-enterprise) in addition to our continued support of ag-charts-community.
Follow us to keep up to date with all the latest news from AG Grid:
-black?style=for-the-badge&logo=x){kind=icon}
No vulnerabilities found.
Reason
30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
26 out of 26 merged PRs checked by a CI test -- score normalized to 10
Reason
project has 16 contributing companies or organizations
Details
- Info: found contributions from: acceleratech, ag grid, ag-grid, aggrid, dark reader ltd, darkreader, dev-ua, forest in the tree, foundersandcoders, j.p. morgan, making good software ltd, nlkit, nlkitai, pebblecode, shopavel, ukrainian-github
Reason
license file detected
Details
- Info: project has a license file: LICENSE.txt:0
- Warn: project license file does not contain an FSF or OSI license.
Reason
Found 26/30 approved changesets -- score normalized to 8
Reason
2 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-67mh-4wv8-2f99
- Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
Reason
3 out of the last 5 releases have a total of 3 signed artifacts.
Details
- Info: signed release artifact: @ag-grid-community-locale.tgz.sig: https://github.com/ag-grid/ag-grid/releases/tag/release-34.0.2
- Info: signed release artifact: @ag-grid-community-locale.tgz.sig: https://github.com/ag-grid/ag-grid/releases/tag/release-34.0.1
- Info: signed release artifact: @ag-grid-community-locale.tgz.sig: https://github.com/ag-grid/ag-grid/releases/tag/release-34.0.0
- Warn: release artifact v32.3.8 not signed: https://api.github.com/repos/ag-grid/ag-grid/releases/224216217
- Warn: release artifact v33.3.2 not signed: https://api.github.com/repos/ag-grid/ag-grid/releases/222986070
- Warn: release artifact release-34.0.2 does not have provenance: https://api.github.com/repos/ag-grid/ag-grid/releases/232455793
- Warn: release artifact release-34.0.1 does not have provenance: https://api.github.com/repos/ag-grid/ag-grid/releases/230773930
- Warn: release artifact release-34.0.0 does not have provenance: https://api.github.com/repos/ag-grid/ag-grid/releases/227712950
- Warn: release artifact v32.3.8 does not have provenance: https://api.github.com/repos/ag-grid/ag-grid/releases/224216217
- Warn: release artifact v33.3.2 does not have provenance: https://api.github.com/repos/ag-grid/ag-grid/releases/222986070
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: jobLevel 'contents' permission set to 'write': .github/workflows/ci.yml:455
- Info: jobLevel 'actions' permission set to 'read': .github/workflows/ci.yml:456
- Warn: jobLevel 'checks' permission set to 'write': .github/workflows/ci.yml:457
- Info: topLevel 'contents' permission set to 'read': .github/workflows/accessibility.yml:40
- Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:61
- Info: topLevel 'actions' permission set to 'read': .github/workflows/ci.yml:62
- Warn: no topLevel permission defined: .github/workflows/csp.yml:1
- Warn: no topLevel permission defined: .github/workflows/doc-tests.yml:1
- Warn: topLevel 'contents' permission set to 'write': .github/workflows/full-clean-build.yml:24
- Warn: topLevel 'actions' permission set to 'write': .github/workflows/full-clean-build.yml:25
- Info: topLevel 'contents' permission set to 'read': .github/workflows/gh-comment-hook.yml:12
- Info: topLevel 'contents' permission set to 'read': .github/workflows/performance.yml:42
- Info: topLevel permissions set to 'read-all': .github/workflows/scorecard.yml:18
- Info: topLevel 'contents' permission set to 'read': .github/workflows/security.yml:20
- Info: topLevel 'contents' permission set to 'read': .github/workflows/update-jira-ticket.yml:19
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
no update tool detected
Details
- Warn: no dependency update tool configurations found
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Info: Possibly incomplete results: error parsing shell code: unclosed here-document 'EOF': scripts/ci/substituteAgChartsTypesScene.sh:0
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/accessibility.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/accessibility.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/accessibility.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/accessibility.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/accessibility.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/accessibility.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/accessibility.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/accessibility.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/accessibility.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/accessibility.yml/latest?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/accessibility.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/accessibility.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/accessibility.yml:156: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/accessibility.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/accessibility.yml:206: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/accessibility.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:336: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:341: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:373: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:461: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:476: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:490: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:550: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:558: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:172: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:193: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:228: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:249: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:254: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:270: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:290: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:295: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:316: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/ci.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/csp.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/csp.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/csp.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/csp.yml/latest?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/csp.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/csp.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:266: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:277: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:288: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:338: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:127: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:177: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:193: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:225: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/doc-tests.yml:244: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/doc-tests.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/full-clean-build.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/full-clean-build.yml/latest?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/full-clean-build.yml:166: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/full-clean-build.yml/latest?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/full-clean-build.yml:184: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/full-clean-build.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/full-clean-build.yml:210: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/full-clean-build.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/full-clean-build.yml:257: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/full-clean-build.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/full-clean-build.yml:265: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/full-clean-build.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gh-comment-hook.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/gh-comment-hook.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/performance.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/performance.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/performance.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/performance.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/performance.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/performance.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/performance.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/performance.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/performance.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/performance.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/performance.yml:160: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/performance.yml/latest?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/performance.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/performance.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/performance.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/performance.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/scorecard.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/scorecard.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/security.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/security.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/security.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/security.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/security.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/security.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/security.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/security.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/security.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/security.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-jira-ticket.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/update-jira-ticket.yml/latest?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-jira-ticket.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/ag-grid/ag-grid/update-jira-ticket.yml/latest?enable=pin
- Warn: containerImage not pinned by hash: external/ag-shared/scripts/gha-debug/Dockerfile:1: pin your Docker image by updating myoung34/github-runner:latest to myoung34/github-runner:latest@sha256:0d393f4b93e6f767ac7902a27b7eac6b93e0ed4d575bbabff651718cf3af327f
- Warn: npmCommand not pinned by hash: testing/angular-package-tests/run.sh:12
- Warn: npmCommand not pinned by hash: testing/angular-package-tests/run.sh:15
- Warn: npmCommand not pinned by hash: testing/react-package-tests/run-basic.sh:14
- Warn: npmCommand not pinned by hash: testing/react-package-tests/run-basic.sh:15
- Warn: npmCommand not pinned by hash: testing/react-package-tests/run-next-js.sh:13
- Warn: npmCommand not pinned by hash: testing/shared/run.sh:137
- Warn: npmCommand not pinned by hash: testing/shared/run.sh:140
- Warn: npmCommand not pinned by hash: testing/vue-package-tests/run.sh:14
- Warn: npmCommand not pinned by hash: .github/workflows/doc-tests.yml:110
- Info: 2 out of 67 GitHub-owned GitHubAction dependencies pinned
- Info: 1 out of 10 third-party GitHubAction dependencies pinned
- Info: 0 out of 1 containerImage dependencies pinned
- Info: 0 out of 9 npmCommand dependencies pinned
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 26 are checked with a SAST tool
Score
5.1
/10
Last Scanned on 2025-07-17T16:28:14Z
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More