Consider replacing Klaro cookie consent tool, as it seems unmaintained & less accessible

[tdonohue]

As of this ticket creation, the Klaro cookie consent tool hasn't had a new release since 2021: https://github.com/klaro-org/privacy-manager/releases/tags

It also has some known accessibility issues which haven't been addressed: klaro-org/klaro-js#100

We should consider replacing it with Orejime, which was originally a fork of Klaro, but continues to be maintained as an open source project. It has also has a focus on accessibility. https://github.com/empreinte-digitale/orejime#readme

This migration likely shouldn't be too complex as the two look similar in nature. But, it likely should occur in a major release as all DSpace users will likely need to re-consent to the new cookie consent tool.

[atarix83]

@tdonohue @hostle83

4science is interested in working on this task and the related one #2491

Estimation is about 20h

[tdonohue]

@atarix83 : Thanks, assigning to you. I would like to understand what approach you plan to take for potentially replacing Klaro.

Since this ticket was created, it looks like Klaro has had some minor releases. But none of them seem to improve accessibility. Orejime still seems to have accessibility improvements, but it hasn't seen a new release since 2022. But, it does seem to have people supporting it on GitHub (as its issues seem to get answers: https://github.com/empreinte-digitale/orejime/issues)

I basically wanted to verify the solution you are going with. Orejime still seems promising, but there may be even better solutions out there (I haven't looked around for a while).

Nonetheless, I'll assign this to you and add the initial estimate. If the estimate needs later updates, let us know.

[AndreaBarbasso]

@tdonohue, after some research we decided to proceed with Orejime, since it's a fork of Klaro and is the only project we found with decent support (as you said, issues seem to get answers, and pretty fast nonetheless) that has a focus on a11y.

[tdonohue]

Thanks for letting me know, @AndreaBarbasso . That sounds reasonable.