← Home

ag-grid-community

11
Versions
License
No
Install Scripts
Attested
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation (unverified) npm registry signatures gitHead linked

Maintainers

ceolterseanlandsmanalberto.gutierrezrmc.software

Keywords

agag-griddatagriddata-griddata griddatatabledata-tabledata tablegridtablereacttableangularangular data gridangular tableangular-componentreactreact data gridreact tablereact-componentreactjsvuevuejs

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
dependencies unvetted-dep:ag-stack AI (dependencies): ag-stack is a first-party AG Grid package published under the same org and version; not a suspicious third-party dep. ai
dependencies unvetted-dep:ag-charts-types AI (dependencies): ag-charts-types is a sibling package from the AG Grid ecosystem used for chart integration type definitions; its presence as a dependency of ag-grid-community is expected and legitimate across all versions. ai

Versions (showing 11 of 11)

Version Deps Published
36.0.2 2 / 4
36.0.1 2 / 4
36.0.0 2 / 4
35.3.1 1 / 4
35.3.0 1 / 4
35.2.1 1 / 7
35.2.0 1 / 7
35.1.0 1 / 16
35.0.1 1 / 16
35.0.0 1 / 16
34.3.1 1 / 15

v36.0.2

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v36.0.1

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.