Slickgrid components made available in Angular
82%
Total Score
healthy
Active releases and a well-supported repository outweigh concentrated ownership and workflow hygiene concerns.
Only one registry account has publish access. That is a concentration concern, although repository activity shows a broader active contributor set and this is a user-owned project rather than an organization-backed one.
The repository is owned by a user account rather than an organization, so the concentrated commit and registry-publishing ownership carries more continuity risk than it would in an organization-backed project.
Six contributors were active in the last 3 months, but the top contributor made about 88% of commits; that concentration leaves meaningful continuity risk without organization backing.
The repository uses established build tooling including TypeScript, Vite, webpack, and npm scripts, but no security-scanning tools were detected.
No security policy was detected in the repository, leaving vulnerability-reporting expectations and response procedures less transparent.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2025-10128 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. angular-slickgrid is vulnerable to Cross-site Scripting (XSS) in versions 4.0.0 - 8.13.0. | 4.0.0 - 8.13.0 | Medium |
| Dependency | Last Release | Score |
|---|---|---|
rxjs Version ^7.8.2 | — | — |
tslib Version ^2.3.0 | — | — |
dequal Version ^2.0.3 | — | — |
@ngx-translate/core Version ^17.0.0 | — | — |
@slickgrid-universal/utils Version 10.10.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.