# CookieConsent 3.1.0 upstream record

This directory contains an unchanged, local copy of the selected
CookieConsent browser distribution. Runtime delivery does not depend on a CDN.

## Upstream identity

- Project: CookieConsent by Orest Bida
- npm package: `vanilla-cookieconsent`
- Version: `3.1.0`
- Release tag: `v3.1.0`
- Release: <https://github.com/orestbida/cookieconsent/releases/tag/v3.1.0>
- Source commit: `e6279509aab5b96be198297b0283b321ad76b0a9`
- npm package page: <https://www.npmjs.com/package/vanilla-cookieconsent/v/3.1.0>
- npm tarball: <https://registry.npmjs.org/vanilla-cookieconsent/-/vanilla-cookieconsent-3.1.0.tgz>
- npm integrity (SHA-512): `sha512-/McNRtm/3IXzb9dhqMIcbquoU45SzbN2VB+To4jxEPqMmp7uVniP6BhGLjU8MC7ZCDsNQVOp27fhQTM/ruIXAA==`
- npm shasum (SHA-1): `0f430f4788e9a09e22e795088889b0679a88a263`
- License: MIT, Copyright (c) 2020-2025 Orest Bida
- License source: <https://github.com/orestbida/cookieconsent/blob/v3.1.0/LICENSE>

## Acquisition and verification

- Downloaded and extracted from the npm tarball: `2026-08-03`
- Verified against npm metadata and the `v3.1.0` source tag: `2026-08-03`
- Tarball size: `30800` bytes
- Tarball SHA-256: `1d106b5f433b60d945dfed4c54f5535a8f61a30f2559b3f7548ed79e482aa4b6`

The following files were copied byte-for-byte from the npm tarball without
source or build changes:

| Upstream path | Local path | SHA-256 |
| --- | --- | --- |
| `package/dist/cookieconsent.css` | `cookieconsent.css` | `ca046b8b1b1094107205988e7096a687b241c8ef5f3fefe5e543ed28d26646c1` |
| `package/dist/cookieconsent.umd.js` | `cookieconsent.umd.js` | `bc6e2f2e6381fc025b27a6b0afb5a0e1fc689c6f9fc40a78708adb2054ef4575` |
| `package/LICENSE` | `LICENSE` | `e3cf4e09e007ffede1a8a50aa006b489a5eafd466a2094551a0ac2b308230bfd` |
| `package/package.json` | `package.json` | `1dd6073b529c689b81d0a553ed075182942557bcc73408c62d6b1eea28dcf87d` |

Machine-readable checksum lines are recorded in `SHA256SUMS`. The repository
license copy at
`60-LIZENZEN-UND-NACHWEISE/shared-open-source/COOKIECONSENT-MIT.txt` is
byte-identical to the vendored `LICENSE` file.