
Security News
OWASP 2025 Top 10 Adds Software Supply Chain Failures, Ranked Top Community Concern
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.
@edx/gradebook
Advanced tools
Please tag @edx/educator-neem on any PRs or issues.
The front-end of our editable Gradebook feature.
To install gradebook into your project:
npm i --save @edx/gradebook
To install the project please refer to the edX Developer Stack instructions.
The web application runs on port 1994, so when you go to http://localhost:1994/course-v1:edX+DemoX+Demo_Course you should see the UI (assuming you have such a Demo Course in your devstack). Note that you always have to provide a course id to actually see a gradebook.
If you don't, you can see the log messages for the docker container by executing make gradebook-logs in the devstack directory.
Note that starting the container executes the npm run start script which will hot-reload JavaScript and Sass files changes, so you should (:crossed_fingers:) not need to do anything (other than wait) when making changes.
Assuming you've got the UI running at http://localhost:1994, you can configure the LMS in edx-platform
to point to your local gradebook from the instructor dashboard by putting this settings in lms/env/private.py:
WRITABLE_GRADEBOOK_URL = 'http://localhost:1994'
There are also several edx-platform waffle and feature flags you'll have to enable from the Django admin:
Grades > Persistent grades enabled flag. Add this flag if it doesn't exist,
check the enabled and enabled for all courses boxes.
Waffle > Switches. Add the grades.assume_zero_grade_if_absent switch and make it active.
Waffle_utils > Waffle flag course overrides. You want to activate this flag for any course
in which you'd like to enable the gradebook. Add a course override flag using a course id and the flag name
grades.writable_gradebook. Make sure to check the enabled box. Alternatively, you could add this as a
regular waffle flag to enable the gradebook for all courses.
gradebook-shell from your devstack directory. This will start a bash shell inside your
running gradebook container.make test (which executes npm run test). This will run all of the gradebook tests.config
webpack configurationspublic
gradebook has a single index.html filesrc
components
React componentscontainers
React componentsdata
actions
Redux action creatorsconstantsreducers
Redux reducersSee the @edx/frontend-auth repo for information about securing routes in your application that require user authentication.
FAQs
edx editable gradebook-ui to manipulate grade overrides on subsections
We found that @edx/gradebook demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 11 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.