Is @scoped-vaadin/component-base safe to use?

@scoped-vaadin/component-base has no known vulnerabilities on the latest version (24.8.7). DepScope rates its health at 49/100 (high risk).

What is the latest version of @scoped-vaadin/component-base?

The latest version of @scoped-vaadin/component-base is 24.8.7, released 2025-09-05.

Does @scoped-vaadin/component-base have known vulnerabilities?

No known vulnerabilities on the latest version of @scoped-vaadin/component-base.

Is @scoped-vaadin/component-base deprecated?

No, @scoped-vaadin/component-base is actively maintained. Latest release: 24.8.7 (2025-09-05).

What are alternatives to @scoped-vaadin/component-base?

Popular alternatives to @scoped-vaadin/component-base in npm include: debug, lru-cache, string-width, commander, picomatch.

What license does @scoped-vaadin/component-base use?

@scoped-vaadin/component-base is licensed under Apache-2.0.

@scoped-vaadin/component-base

npmv24.8.7

Vaadin component base mixins

License Apache-2.0permissive16 versions1 maintainers6 deps167 weekly dl

robrez/scoped-vaadin

/ 100

Health

safe to use

@scoped-vaadin/[email protected] is safe to use (health: 49/100)

Health breakdown0 – 100

10/25

maintenance

3/20

popularity

25/25

security

9/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

11.4 KBminified

3.8 KB gzipped

6 direct dependencies

ESMside effectsscoped

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (6)

@open-wc/dedupe-mixin @polymer/polymer @vaadin/vaadin-development-mode-detector @vaadin/vaadin-usage-statistics lit @scoped-vaadin/internal-custom-elements-registry

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@scoped-vaadin/component-base