Is @vaadin/vaadin-messages safe to use?

@vaadin/vaadin-messages has no known vulnerabilities on the latest version (23.6.4). DepScope rates its health at 65/100 (moderate risk).

What is the latest version of @vaadin/vaadin-messages?

The latest version of @vaadin/vaadin-messages is 23.6.4, released 2026-03-11.

Does @vaadin/vaadin-messages have known vulnerabilities?

No known vulnerabilities on the latest version of @vaadin/vaadin-messages.

Is @vaadin/vaadin-messages deprecated?

No, @vaadin/vaadin-messages is actively maintained. Latest release: 23.6.4 (2026-03-11).

What are alternatives to @vaadin/vaadin-messages?

Popular alternatives to @vaadin/vaadin-messages in npm include: semver, debug, ansi-styles, minimatch, brace-expansion.

What license does @vaadin/vaadin-messages use?

@vaadin/vaadin-messages is licensed under https://vaadin.com/commercial-license-and-service-terms.

@vaadin/vaadin-messages

npmv23.6.4

vaadin-messages

License https://vaadin.com/commercial-license-and-service-terms241 versions12 maintainers2 deps

vaadin/web-components

/ 100

Health

use with caution

@vaadin/[email protected] low health (65/100) — consider alternatives

Moderate health score (65/100) — verify manually

Health breakdown0 – 100

20/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

5/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (2)

@vaadin/message-input @vaadin/message-list

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@vaadin/vaadin-messages