Skip to content

Github Installation Guide

Private GitHub Registry

  1. Ensure you have access to the GitHub repository.
  2. Authenticate your npm client with GitHub by creating a .npmrc file in your project directory or user home directory with the following content:
@revolist:registry=https://npm.pkg.github.com/
//npm.pkg.github.com/:_authToken=YOUR_PERSONAL_ACCESS_TOKEN
  1. Replace YOUR_PERSONAL_ACCESS_TOKEN with a GitHub token that has read:packages and repo permissions.
  2. Install the packages. Run the following commands to install the latest versions from the private package registry:
Terminal window
npm install @revolist/revogrid-pro@latest
npm install @revolist/pivot@latest

For additional guidance on installing from GitHub’s private registry, please refer to the official GitHub Packages documentation.

RevoGrid Pro product releases include SBOM files and Sigstore release signatures.

  • SBOM files are generated in SPDX JSON and CycloneDX JSON formats.
  • Package tarballs are signed with Sigstore Cosign keyless signing in the release workflow.
  • The signed tarball is the same tarball published to GitHub Packages.

For verification commands and related policy links, see Security and Supply Chain.