Gathering detailed insights and metrics for @vaadin/vaadin-cookie-consent
Gathering detailed insights and metrics for @vaadin/vaadin-cookie-consent
A set of high-quality standards based web components for enterprise web applications. Part of Vaadin 20+
Installations
npm install @vaadin/vaadin-cookie-consentDeveloper Guide
BETA
Typescript
No
Module System
ESM
Node Version
20.18.3
NPM Version
lerna/4.0.0/node@v20.18.3+x64 (linux)
Releases
513
Languages
5
JavaScript
CSS
TypeScript
HTML
Shell
JavaScript (87.83%)
CSS (4.65%)
TypeScript (3.94%)
HTML (3.58%)
Shell (0.01%)
Developer
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
522 Stars
19,430 Commits
86 Forks
16 Watchers
400 Branches
142 Contributors
Updated on Jul 16, 2025
Maintainers
12
Package Meta Information
Latest Version
23.6.0
Package Id
@vaadin/vaadin-cookie-consent@23.6.0
Unpacked Size
3.72 kB
Size
1.44 kB
File Count
9
NPM Version
lerna/4.0.0/node@v20.18.3+x64 (linux)
Node Version
20.18.3
Published on
Jun 05, 2025
Total Downloads
Cumulative downloads
Total Downloads
NaN
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
1
@vaadin/vaadin-cookie-consent
⚠️ Starting from Vaadin 22, this package is deprecated. Please use
@vaadin/cookie-consentinstead.
A web component to display a banner for users to give consent to the usage of cookies.
ℹ️ A commercial Vaadin subscription is required to use Cookie Consent in your project.
Contributing
Read the contributing guide to learn about our development process, how to propose bugfixes and improvements, and how to test your changes to Vaadin components.
License
This program is available under Vaadin Commercial License and Service Terms. See https://vaadin.com/commercial-license-and-service-terms for the full license.
Vaadin collects usage statistics at development time to improve this product.. For details and to opt-out, see https://github.com/vaadin/vaadin-usage-statistics.
No vulnerabilities found.
Reason
30 commit(s) and 17 issue activity found in the last 90 days -- score normalized to 10
Reason
all changesets reviewed
Reason
no dangerous workflow patterns detected
Reason
GitHub workflow tokens follow principle of least privilege
Details
- Info: topLevel 'contents' permission set to 'read': .github/workflows/coverage.yml:10
- Info: topLevel 'contents' permission set to 'read': .github/workflows/unit-tests.yml:6
- Info: topLevel 'contents' permission set to 'read': .github/workflows/verify.yml:6
- Info: topLevel 'contents' permission set to 'read': .github/workflows/visual-tests.yml:6
- Info: no jobLevel write permissions found
Reason
security policy file detected
Details
- Info: security policy file detected: github.com/vaadin/.github/SECURITY.md:1
- Info: Found linked content: github.com/vaadin/.github/SECURITY.md:1
- Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/vaadin/.github/SECURITY.md:1
- Info: Found text in security policy: github.com/vaadin/.github/SECURITY.md:1
Reason
no binaries found in the repo
Reason
SAST tool is not run on all commits -- score normalized to 9
Details
- Warn: 28 commits out of 30 are checked with a SAST tool
Reason
4 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
- Warn: Project is vulnerable to: GHSA-xf5p-87ch-gxw2
- Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj
- Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
license file not detected
Details
- Warn: project does not have a license file
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/coverage.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/vaadin/web-components/coverage.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/coverage.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/vaadin/web-components/coverage.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit-tests.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/vaadin/web-components/unit-tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit-tests.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/vaadin/web-components/unit-tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit-tests.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/vaadin/web-components/unit-tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit-tests.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/vaadin/web-components/unit-tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit-tests.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/vaadin/web-components/unit-tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/unit-tests.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/vaadin/web-components/unit-tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/vaadin/web-components/verify.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/vaadin/web-components/verify.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/vaadin/web-components/verify.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/vaadin/web-components/verify.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/vaadin/web-components/verify.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/vaadin/web-components/verify.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/visual-tests.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/vaadin/web-components/visual-tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/visual-tests.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/vaadin/web-components/visual-tests.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/visual-tests.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/vaadin/web-components/visual-tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/visual-tests.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/vaadin/web-components/visual-tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/visual-tests.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/vaadin/web-components/visual-tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/visual-tests.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/vaadin/web-components/visual-tests.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/visual-tests.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/vaadin/web-components/visual-tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/visual-tests.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/vaadin/web-components/visual-tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/visual-tests.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/vaadin/web-components/visual-tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/visual-tests.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/vaadin/web-components/visual-tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/visual-tests.yml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/vaadin/web-components/visual-tests.yml/main?enable=pin
- Info: 0 out of 23 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 2 third-party GitHubAction dependencies pinned
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Score
7.4
/10
Last Scanned on 2025-07-07
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More