Open-Source Databases · gristlabs

grist-core

Grist is an open-source relational spreadsheet that bridges spreadsheet flexibility with database robustness. It runs as a self-hosted server or desktop app, supports Python formulas, and offers collaboration, access control, and integrations. The Community edition (grist-core) is Apache 2.0 licensed; Grist Labs sells additional commercial features.

Talk to DEV.co Discuss Implementation

Source: GitHub — github.com/gristlabs/grist-core

11.3k

GitHub stars

595

Forks

TypeScript

Primary language

Apache-2.0

License (OSI-approved)

Key facts

Objective fields from the source. Values we can't verify are shown as “Unknown” rather than guessed.

Field	Value
Repository	gristlabs/grist-core
Owner	gristlabs
Primary language	TypeScript
License	Apache-2.0 — OSI-approved
Stars	11.3k
Forks	595
Open issues	677
Latest release	v1.7.16 (2026-06-30)
Last updated	2026-07-08
Source	https://github.com/gristlabs/grist-core

What grist-core is

TypeScript/Node.js server application using SQLite as the portable storage format. Supports Python formula execution, REST API, webhooks, OIDC/SAML SSO, SCIM provisioning, and custom widgets. Provides incremental imports, row/column/table access rules, and real-time collaboration via cell comments and suggestions.

Quickstart

Get the grist-core source

Clone the repository and explore it locally.

terminalbash

1git clone https://github.com/gristlabs/grist-core.git2cd grist-core3# follow the project's README for install & configuration

Need it deployed, integrated, or customized instead? DEV.co ships production installs.

Best use cases

Self-hosted internal data management

Organizations needing compliance, intranet operation, or control over infrastructure can deploy grist-core on-premises. SQLite format enables portable backups and no vendor lock-in.

Rapid business intelligence dashboards

Drag-and-drop widgets (charts, cards, summaries, calendars) linked together allow non-technical users to build multi-view dashboards without coding. Python formulas enable complex calculations.

Collaborative form-driven workflows

Native forms with file attachments, URL pre-population, and hidden fields feed directly into tables. Suggest-changes workflow and cell comments enable team review cycles without external tools.

Implementation considerations

SQLite storage is portable but not cluster-ready; scale-out requires external replication or migration to managed hosting.
Python formula execution runs in-process; malicious or poorly written formulas can impact server stability; isolation/sandboxing design should be reviewed.
Access control (row, column, table rules) requires SSO/OIDC/SAML setup to be meaningful; local auth is less granular.
Incremental imports and webhook-based integrations add flexibility but require custom logic for error handling and data reconciliation.
TypeScript codebase and Node.js backend mean operational familiarity with JavaScript tooling and npm-based deployments is assumed.

When to avoid it — and what to weigh

Extremely high-scale real-time analytics — SQLite is not optimized for petabyte-scale or high-concurrency OLAP workloads. Use specialized data warehouses for that purpose.
Need proprietary enterprise features out of the box — grist-core is Community edition. Advanced SSO, SCIM, service accounts, and other enterprise capabilities require either commercial licensing or manual integration.
Excel/Google Sheets drop-in replacement for power users — Grist's database-like column model differs from cell-addressable spreadsheets. Users must adapt mental models; migration from existing sheets requires deliberate mapping.
Minimal operational overhead — Self-hosting requires managing database, backups, updates, and SSO configuration. Lightweight deployments may be simpler on managed SaaS (getgrist.com) or grist-omnibus.

License & commercial use

Apache License 2.0 (ASL 2.0) – permissive open-source license allowing commercial use, modification, and distribution with attribution and liability disclaimer. Source code available at gristlabs/grist-core on GitHub. No copyleft obligation.

Apache 2.0 is a permissive OSI license permitting commercial use of grist-core without royalty or special approval. However, Grist Labs sells a separate commercial edition with additional features (SSO, SCIM, service accounts, etc.); clarify whether your use case requires those to avoid license disputes. Verify with Grist Labs' terms if reselling or bundling as a service.

DEV.co evaluation signals

Editorial assessment — not user reviews. Directional, with an explicit confidence level.

Signal	Assessment
Maintenance	Active
Documentation	Strong
License clarity	Clear
Deployment complexity	Moderate
DEV.co fit	Good
Assessment confidence	High

Security considerations

Python formula execution runs server-side; design should be reviewed for code-injection and resource-exhaustion protections. Row/column-level access rules are available but require SSO to enforce meaningfully. SQLite is single-file database; encryption-at-rest and network transport security depend on deployment (reverse proxy, TLS). No explicit mention of penetration testing, audit log, or compliance certifications in provided data. Backup/restore process should be validated for integrity.

Alternatives to consider

Airtable

Fully managed SaaS with similar hybrid database/spreadsheet model, stronger mobile app, tighter Zapier integration, but lacks self-hosting and Python formulas. Grist blog directly compares the two.

Microsoft Excel Online / Google Sheets

Cell-addressable, ubiquitous, real-time co-editing, but weaker database structure, no self-hosting (Google Sheets), and different formula paradigm. Simpler for traditional spreadsheet users.

NocoDB / Supabase

Open-source, self-hosted, database-first UI builders with API-first design and PostgreSQL backend. Better for high-scale or polyglot teams, but less polished UI and fewer pre-built dashboards than Grist.

Software development agency

Build on grist-core with DEV.co software developers

Start with a local Docker deployment or visit docs.getgrist.com to explore live examples. Review deployment complexity, formula sandboxing, and SSO integration needs for your security posture before production. Devco can help architect self-hosted infrastructure and custom integrations.

Talk to DEV.co

Related open-source tools

Surfaced by semantic similarity across the DEV.co open-source index.

node-sqlite grocy GRDB.swift

Related on DEV.co

Explore the category and the services that help you build with it.

Open-Source Databases API Development Web App Development Cloud Deployment Talk to DEV.co

grist-core FAQ

Can I use grist-core commercially without paying Grist Labs?

Yes. Apache 2.0 permits commercial use, modification, and distribution. However, if you need enterprise features (SCIM, service accounts, advanced SSO), you may need commercial licensing; review Grist Labs' terms to avoid disputes.

Is grist-core suitable for mission-critical production?

Yes, with caveats. SQLite works well for single-instance/small-team deployments. For high availability or scale, you must architect external replication, backups, and failover. Review security considerations (formula sandboxing, access control enforcement) and perform load testing.

How do I migrate from Excel or Airtable?

Grist imports CSV, Excel format, and Airtable directly. However, formulas and structure do not map 1:1; plan manual column mapping and formula rewriting. Incremental imports help for ongoing syncs.

What happens if I run Python formulas that are slow or malicious?

Unknown. Data provided does not detail formula sandboxing, timeouts, or resource limits. Review grist-core code or contact maintainers before running untrusted formulas in production.

Software developers & web developers for hire

DEV.co is a software development agency delivering custom software development services to companies building on open source. Our software developers and web developers design, integrate, and ship production systems — spanning web development, APIs, AI, data, and cloud. If grist-core is part of your open-source databases roadmap, our team can implement, customize, migrate, and maintain it.

Ready to evaluate Grist for your team?

Talk to DEV.co Schedule a Consultation