Github Installation Guide
- Ensure you have access to the GitHub repository.
- Authenticate your npm client with GitHub by creating a .npmrc file in your project directory or user home directory with the following content:
@revolist:registry=https://npm.pkg.github.com///npm.pkg.github.com/:_authToken=YOUR_PERSONAL_ACCESS_TOKEN- Replace
YOUR_PERSONAL_ACCESS_TOKENwith a GitHub token that hasread:packagesand repo permissions. - Install the packages. Run the following commands to install the latest versions from the private package registry:
npm install @revolist/revogrid-pro@latestnpm install @revolist/pivot@latestFor additional guidance on installing from GitHub’s private registry, please refer to the official GitHub Packages documentation.
Supply Chain Metadata
Section titled “Supply Chain Metadata”RevoGrid Pro product releases include SBOM files and Sigstore release signatures.
- SBOM files are generated in SPDX JSON and CycloneDX JSON formats.
- Package tarballs are signed with Sigstore Cosign keyless signing in the release workflow.
- The signed tarball is the same tarball published to GitHub Packages.
For verification commands and related policy links, see Security and Supply Chain.