Is @scoped-vaadin/component-base safe to use?

@scoped-vaadin/component-base has no known vulnerabilities on the latest version (24.8.7). DepScope rates its health at 49/100 (high risk).

What is the latest version of @scoped-vaadin/component-base?

The latest version of @scoped-vaadin/component-base is 24.8.7, released 2025-09-05.

Does @scoped-vaadin/component-base have known vulnerabilities?

No known vulnerabilities on the latest version of @scoped-vaadin/component-base.

Is @scoped-vaadin/component-base deprecated?

No, @scoped-vaadin/component-base is actively maintained. Latest release: 24.8.7 (2025-09-05).

What are alternatives to @scoped-vaadin/component-base?

Popular alternatives to @scoped-vaadin/component-base in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does @scoped-vaadin/component-base use?

@scoped-vaadin/component-base is licensed under Apache-2.0.

@scoped-vaadin/component-base

npmv24.8.7

Vaadin component base mixins

License Apache-2.0permissive16 versions1 maintainers6 deps158 weekly dl

robrez/scoped-vaadin

/ 100

Health

use with caution

@scoped-vaadin/[email protected] low health (49/100) — consider alternatives

Moderate health score (49/100) — verify manually

Health breakdown0 – 100

10/25

maintenance

3/20

popularity

25/25

security

9/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (6)

@open-wc/dedupe-mixin @polymer/polymer @vaadin/vaadin-development-mode-detector @vaadin/vaadin-usage-statistics lit @scoped-vaadin/internal-custom-elements-registry

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@scoped-vaadin/component-base