Is @vaadin/router safe to use?

@vaadin/router has no known vulnerabilities on the latest version (2.0.1). DepScope rates its health at 69/100 (moderate risk).

What is the latest version of @vaadin/router?

The latest version of @vaadin/router is 2.0.1, released 2025-11-14.

Does @vaadin/router have known vulnerabilities?

No known vulnerabilities on the latest version of @vaadin/router.

Is @vaadin/router deprecated?

No, @vaadin/router is actively maintained. Latest release: 2.0.1 (2025-11-14).

What are alternatives to @vaadin/router?

Popular alternatives to @vaadin/router in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does @vaadin/router use?

@vaadin/router is licensed under Apache-2.0.

@vaadin/router

npmv2.0.1

Small and powerful client-side router for Web Components. Framework-agnostic.

License Apache-2.0permissive37 versions12 maintainers3 deps37,706 weekly dl

vaadin/vaadin-router

/ 100

Health

use with caution

@vaadin/[email protected] low health (69/100) — consider alternatives

Moderate health score (69/100) — verify manually

Health breakdown0 – 100

15/25

maintenance

10/20

popularity

25/25

security

12/15

maturity

7/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

22.8 KBminified

8.6 KB gzipped

3 direct dependencies

ESMside effectsscoped

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (3)

@vaadin/vaadin-usage-statistics path-to-regexp type-fest

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@vaadin/router