gridstack
TypeScript/JS lib for dashboard layout and creation, responsive, mobile support, no external dependencies, with many wrappers (React, Angular, Vue, Ember, knockout...)
87%
Total Score
100
100
94
75
50
Health Score Breakdown
No build attestation or trusted-publisher provenance was reported, so consumers have limited registry evidence connecting the artifact to its build process.
The repository uses TypeScript, Vitest, and other build tools, but no security scanning tools were detected, leaving a modest process gap.
No repository security policy was found, reducing transparency about vulnerability reporting and response expectations.
Both workflows were analyzed without dangerous triggers or audit findings, but all eight action references are unpinned, weakening reproducibility and action supply-chain hygiene.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2024-10350 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. gridstack is vulnerable to Cross-site Scripting (XSS) in versions 0.1.0 - 10.3.1. | 0.1.0 - 10.3.1 | Low |
Package versions
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 20 days ago
- Created
- 11 years ago
- Unpacked Size
- 2.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.