Growthbook - Feature Flags Display Tab Plugin by zaki-hanafiah · Pull Request #7800 · backstage/community-plugins

zaki-hanafiah · 2026-02-26T03:03:36Z

Hey, I just made a Pull Request!

This adds a new Growthbook Plugin workspace with the frontend and backend plugins.

This plugin will add a "Feature Flags" tab to Backstage catalog entity pages for any entity annotated with growthbook.io/enabled: "true". You can also use the growthbook.io/project: 'my-project-name' to scope it to one project only.
I have also included a standalone entity page that can be used if needed (GrowthbookEntityPage.tsx).

Other basic features for the frontend include:

Feature flag table with type badges (boolean, string, number, json) and default values
Project filter button group (fetched dynamically from the user's projects found from Growthbook API)
JSON detail dialog for expanding the view of more complex / nested flag values

The backend plugin serves as a proxy/cache layer between Backstage and GrowthBook:

Management API mode (when secretKey is configured / available): full project filtering and additional feature metadata via /api/v1/features + /api/v1/projects - More Info
SDK API fallback mode: uses public GrowthBook SDK endpoint when no secret key is set
60-second flag cache, 5-minute project cache
Exposes /api/growthbook-flags/flags and /api/growthbook-flags/projects with unauthenticated auth policy (read-only viewer, seems like this is how it's setup with other community-plugins, correct me if im wrong 🙏🏻 (

✔️ Checklist

A changeset describing the change and affected packages
Added or updated documentation
Tests for new functionality and regression tests for bug fixes
Screenshots attached (for UI changes)
All your commits have a Signed-off-by line in the message

backstage-goalie · 2026-02-26T03:04:02Z

Changed Packages

Package Name	Package Path	Changeset Bump	Current Version
@backstage-community/plugin-growthbook-backend	workspaces/growthbook-flags/plugins/growthbook-backend	minor	`v0.1.0`
@backstage-community/plugin-growthbook	workspaces/growthbook-flags/plugins/growthbook	minor	`v0.1.0`

backstage-goalie · 2026-03-01T19:23:22Z

Thanks for the contribution!
All commits need to be DCO signed before they are reviewed. Please refer to the the DCO section in CONTRIBUTING.md or the DCO status for more info.

Signed-off-by: Zaki Hanafiah <zaki@zakhov.com>

… plugin with deps Signed-off-by: Zaki Hanafiah <zaki@zakhov.com>

Signed-off-by: Zaki Hanafiah <zaki@zakhov.com>

Sarabadu · 2026-03-01T19:26:01Z

Hey @zaki-hanafiah looking forward for trying this new plugin, but seems like you need a rebase as the changes triggered every workspace

zaki-hanafiah · 2026-03-01T19:28:06Z

Hey @zaki-hanafiah looking forward for trying this new plugin, but seems like you need a rebase as the changes triggered every workspace

hi @Sarabadu
yep, i made a mess earlier trying to pull latest main from upstream, have cherry-picked and rebased, thanks

awanlin

Thanks for the contirbution @zaki-hanafiah, nice work overall, left a few comments the vast majority are simple things.

Additonally you need to add yourself as to the CODEOWNERS file - https://github.com/backstage/community-plugins/blob/main/.github/CODEOWNERS - and also submit a request to become an Org Member here: https://github.com/backstage/community/issues/new?template=org_member.yaml

Once this PR is merged and release I would recommend following this up with a PR to add support for the New Frontend System, docs on that are here: https://backstage.io/docs/frontend-system/building-plugins/index

awanlin · 2026-03-07T14:02:27Z

workspaces/growthbook-flags/.changeset/growthbook-initial-release.md

+'@backstage-community/plugin-growthbook-backend': minor
+---
+
+Initial release of GrowthBook feature flags plugin for Backstage.


This can be shorted to just this line and a note to see the README for more details 👍

changesets get rolled up into a changelog and we want to keep them short and concise.

awanlin · 2026-03-07T14:06:55Z

workspaces/growthbook-flags/plugins/growthbook-backend/src/module.ts

+
+        http.use(handler);
+        http.addAuthPolicy({ path: '/flags', allow: 'unauthenticated' });
+        http.addAuthPolicy({ path: '/projects', allow: 'unauthenticated' });


Why are you doing this? This seems like a security risk.

awanlin · 2026-03-07T14:08:13Z

workspaces/growthbook-flags/plugins/growthbook-backend/src/setupTests.ts

@@ -13,11 +13,3 @@
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */


I would expect to see: export {}; at the end of this file otherwise I'm not sure why it's needed?

awanlin · 2026-03-07T14:08:43Z

workspaces/growthbook-flags/plugins/growthbook-backend/CHANGELOG.md

Delete this file, it will be created by the release process and should not be touched by hand 👍

awanlin · 2026-03-07T14:09:30Z

workspaces/growthbook-flags/plugins/growthbook-backend/config.d.ts

+     * GrowthBook Management API secret key (read-only).
+     * When present, flags are fetched via the Management API with full project and environment metadata.
+     * When absent, the SDK API fallback is used and sdkKeys must be provided.
+     * @visibility backend


Suggested change

* @visibility backend

* @visibility secret

This is a secret and should be marked as such.

awanlin · 2026-03-07T14:23:36Z

workspaces/growthbook-flags/package.json

  "private": true,
  "engines": {
-    "node": "22 || 24"
+    "node": "20 || 22"


Suggested change

"node": "20 || 22"

"node": "22 || 24"

awanlin · 2026-03-07T14:23:53Z

workspaces/growthbook-flags/package.json

    "node-gyp": "^10.0.0",
    "prettier": "^2.3.2",
-    "typescript": "~5.8.0"
+    "typescript": "~5.3.0"


Suggested change

"typescript": "~5.3.0"

"typescript": "~5.8.0"

awanlin · 2026-03-07T14:24:53Z

workspaces/growthbook-flags/README.md

+- **[@backstage-community/plugin-growthbook](./plugins/growthbook/README.md)**: Frontend plugin providing UI components and entity page integration
+- **[@backstage-community/plugin-growthbook-backend](./plugins/growthbook-backend/README.md)**: Backend plugin providing API proxy and caching
+
+## Getting Started


To save on maintenance I would just point people to the proper README files instead, with this approach you have duplication to maitain.

awanlin · 2026-03-07T14:26:54Z

workspaces/growthbook-flags/plugins/growthbook-backend/src/helpers.ts

+
+export type FlagType = 'boolean' | 'number' | 'string' | 'json' | 'null';
+
+export type FlagRow = {


FlagRow and FlagType are used by both the frontend and the backend, I would create a common package to store these to avoid duplicaiton.

awanlin · 2026-03-07T14:28:10Z

workspaces/growthbook-flags/plugins/growthbook-backend/config.d.ts

+    /**
+     * Base URL of your GrowthBook instance.
+     * @example https://app.growthbook.io
+     * @visibility frontend


You have this marked as frontend but best I can tell it's not being used in the frontend.

zaki-hanafiah requested review from a team and backstage-service as code owners February 26, 2026 03:03

zaki-hanafiah requested a review from Parsifal-M February 26, 2026 03:03

backstage-service added workspace/apollo-explorer workspace/feedback workspace/topology workspace/linkerd owner/area-maintainers workspace/airbrake workspace/cloudbuild workspace/badges workspace/dynatrace labels Mar 1, 2026

Zaki Hanafiah and others added 17 commits March 2, 2026 03:25

chore: init gb plugin workspace

3ad6800

Signed-off-by: Zaki Hanafiah <zaki@zakhov.com>

chore: add plugin workspace config files

1f16eda

Signed-off-by: Zaki Hanafiah <zaki@zakhov.com>

feat: add fe and be plugins for gb

196aea7

Signed-off-by: Zaki Hanafiah <zaki@zakhov.com>

fix: eslint errors in backend plugin

cfd726c

Signed-off-by: Zaki Hanafiah <zaki@zakhov.com>

chore: re-commit README generated from yarn script

1cae837

Signed-off-by: Zaki Hanafiah <zaki@zakhov.com>

chore: add plugin README doc

027cedd

Signed-off-by: Zaki Hanafiah <zaki@zakhov.com>

chore: generate changeset

d733bba

Signed-off-by: Zaki Hanafiah <zaki@zakhov.com>

chore: add app-config.yaml

5e8db33

Signed-off-by: Zaki Hanafiah <zaki@zakhov.com>

chore: add initial release md for changetest, add tests for fe and be…

14a24fc

… plugin with deps Signed-off-by: Zaki Hanafiah <zaki@zakhov.com>

fix: sanitize logs and minor refactoring for test helpers

df84900

Signed-off-by: Zaki Hanafiah <zaki@zakhov.com>

chore: fix prettier formatting

a5e19e3

Signed-off-by: Zaki Hanafiah <zaki@zakhov.com>

chore: add api-extractor report files

4c9634b

Signed-off-by: Zaki Hanafiah <zaki@zakhov.com>

fix: regenerate docs after fixing jsdoc error

b78c982

Signed-off-by: Zaki Hanafiah <zaki@zakhov.com>

chore: add missing @public in exported symbols and regenerate reports

4596cdd

Signed-off-by: Zaki Hanafiah <zaki@zakhov.com>

fix: add packageDocumentation comment and commit api report

163caf4

Signed-off-by: Zaki Hanafiah <zaki@zakhov.com>

chore: re-commit api report

a04646d

Signed-off-by: Zaki Hanafiah <zaki@zakhov.com>

chore: add config schema, multi-env docs, and regenerate api reports

079b5ea

Signed-off-by: Zaki Hanafiah <zaki@zakhov.com>

awanlin requested changes Mar 7, 2026

View reviewed changes


		export type FlagType = 'boolean' \| 'number' \| 'string' \| 'json' \| 'null';

		export type FlagRow = {

Conversation

zaki-hanafiah commented Feb 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Hey, I just made a Pull Request!

✔️ Checklist

Uh oh!

backstage-goalie bot commented Feb 26, 2026

Changed Packages

Uh oh!

backstage-goalie bot commented Mar 1, 2026

Uh oh!

Sarabadu commented Mar 1, 2026

Uh oh!

zaki-hanafiah commented Mar 1, 2026

Uh oh!

awanlin left a comment

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

zaki-hanafiah commented Feb 26, 2026 •

edited

Loading