@mui/x-data-grid-pro No license 32 versions

@mui/x-data-grid-pro

npm Repository Homepage

32

Versions

—

License

No

Install Scripts

Verified

Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

cherniavskiilukastylaalexandrefauquettedanailhflaviendelangleoliviertassinarimbilalshafijcquintaskyusufmichelengelennoraleontearminmehromgrkbernardobelchiorrita-codesjanpotoms

Keywords

reactreact-componentmaterial-uimuimui-xreact-tabletabledatatabledata-tabledatagriddata-grid

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
source-diff	net-exec-file:esm/DataGridPro/DataGridPro.js	AI (source-diff): Standard React component with license verification; no actual network calls or code execution.	ai	2026/05/13
source-diff	large-new-source-files	AI (source-diff): Diff baseline is v9 (different major); large file count reflects normal package content.	ai	2026/05/13
phantom-deps	phantom-dep:reselect	AI (phantom-deps): Established MUI package; phantom-dep heuristic false positive for transitive/peer deps in this ecosystem.	ai	2026/05/02
phantom-deps	phantom-dep:@types/format-util	AI (phantom-deps): Types-only package loaded by convention; stable false positive for this package.	ai	2026/05/02
provenance	no-provenance	AI (provenance): MUI packages historically published without Sigstore provenance; not a risk signal for this ecosystem.	ai	2026/05/02
source-diff	net-exec-file:modern/DataGridPro/DataGridPro.js	AI (source-diff): File content is standard React component code using MUI internals; net-exec rule is a false positive for this package.	ai	2026/04/28
source-diff	net-exec-file:node/DataGridPro/DataGridPro.js	AI (source-diff): File content is standard CJS React component code; net-exec rule is a false positive for this package.	ai	2026/04/28
license	uncommon-license:SEE LICENSE IN LICENSE	AI (license): Standard commercial license format for MUI X Pro; stable across all versions.	ai	2026/04/28
dependencies	unvetted-dep:@mui/x-license	AI (dependencies): First-party MUI monorepo package; expected dependency for MUI X Pro components.	ai	2026/04/28

Versions (showing 32 of 32)

Version	Deps	Published
9.2.0	7 / 0	2026-05-13
9.1.0	7 / 0	2026-05-08
9.0.4	7 / 0	2026-04-28
9.0.3	7 / 0	2026-04-27
9.0.2	7 / 0	2026-04-15
9.0.1	7 / 0	2026-04-08
9.0.0	7 / 0	2026-04-08
8.28.6	7 / 0	2026-05-13
8.28.5	7 / 0	2026-05-08
8.28.3	7 / 0	2026-04-15
8.28.2	7 / 0	2026-04-01
8.28.1	7 / 0	2026-03-26
8.28.0	7 / 0	2026-03-20
8.27.5	7 / 0	2026-03-11
8.27.4	7 / 0	2026-03-05
8.27.3	7 / 0	2026-02-25
8.27.2	7 / 0	2026-02-20
8.27.1	7 / 0	2026-02-13
8.27.0	7 / 0	2026-02-02
8.26.0	7 / 0	2026-01-22
8.25.0	7 / 0	2026-01-14
8.24.0	7 / 0	2026-01-08
8.23.0	7 / 0	2025-12-24
8.22.1	7 / 0	2025-12-18
8.22.0	7 / 0	2025-12-11
8.21.0	7 / 0	2025-12-04
8.20.0	7 / 0	2025-11-26
8.19.0	7 / 0	2025-11-20
8.18.0	7 / 0	2025-11-13
8.17.0	7 / 0	2025-11-05
8.16.0	7 / 0	2025-10-29
7.29.11	9 / 0	2025-11-19

v9.2.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v9.1.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v9.0.4

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v9.0.3

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v9.0.2

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v9.0.1

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v9.0.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.28.6

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.28.5

2 findings

HIGH New file with network + code execution: esm/DataGridPro/DataGridPro.js source-diff

Newly added file contains both network calls and dynamic code execution. This is a hallmark of dropper/loader malware.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.28.3

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.28.2

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.28.1

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.28.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.27.5

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.27.4

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.27.3

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.27.2

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.27.1

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.27.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.26.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.25.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.24.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.23.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.22.1

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.22.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.21.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.20.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.19.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.18.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.17.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v8.16.0

1 finding

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v7.29.11

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.