npmpackage.info

Gathering detailed insights and metrics for @csstools/css-color-parser

@csstools/css-color-parser

PostCSS Tools and Plugins

3.0.7

931

MIT-0

CSS

18.89 kB

79,333,694 5.9

Installations

npm install @csstools/css-color-parser

Developer Guide

BETA

Typescript

Yes

Module System

ESM

Min. Node Version

>=18

Node Version

22.12.0

NPM Version

10.9.0 Score

99.4

Supply Chain

78.7

Quality

89.2

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

4

Total

1,159

Closed

152

Merged

1,003

Issues

Open

5

Total

350

Closed

345

Releases

Unable to fetch releases

Contributors

131

View all 131 contributors

Languages

CSS

JavaScript

TypeScript

HTML

Nunjucks

Shell

SCSS

CSS (43.37%)

JavaScript (30.22%)

TypeScript (22.76%)

HTML (3.06%)

Nunjucks (0.48%)

Shell (0.1%)

Developer

csstools

Download Statistics

Total Downloads

79,333,694

Last Day

552,167

Last Week

2,523,600

Last Month

8,820,049

Last Year

57,098,899

GitHub Statistics

931 Stars

4,162 Commits

73 Forks

11 Watching

5 Branches

131 Contributors

Bundle Size

77.30 kB

Minified

18.89 kB

Minified + Gzipped

Bundlephobia

Sponsor this package

https://github.com/sponsors/csstools https://opencollective.com/csstools

Maintainers

Package Meta Information

Latest Version

3.0.7

Package Id

@csstools/css-color-parser@3.0.7

Unpacked Size

94.27 kB

Size

18.52 kB

File Count

NPM Version

10.9.0

Node Version

22.12.0

Publised On

27 Dec 2024

Total Downloads

Cumulative downloads

Total Downloads

79,333,694

Last day

2.7%

552,167

Compared to previous day

Last week

-6.8%

2,523,600

Compared to previous week

Last month

80.4%

8,820,049

Compared to previous month

Last year

156.8%

57,098,899

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

@csstools/color-helpers @csstools/css-calc

Peer Dependencies

@csstools/css-parser-algorithms @csstools/css-tokenizer

Versions

CSS Color Parser

Usage

Add CSS Color Parser to your project:

1npm install @csstools/css-color-parser @csstools/css-parser-algorithms @csstools/css-tokenizer --save-dev

1import { color } from '@csstools/css-color-parser';
2import { isFunctionNode, parseComponentValue } from '@csstools/css-parser-algorithms';
3import { serializeRGB } from '@csstools/css-color-parser';
4import { tokenize } from '@csstools/css-tokenizer';
5
6// color() expects a parsed component value.
7const hwbComponentValue = parseComponentValue(tokenize({ css: 'hwb(10deg 10% 20%)' }));
8const colorData = color(hwbComponentValue);
9if (colorData) {
10	console.log(colorData);
11
12	// serializeRGB() returns a component value.
13	const rgbComponentValue = serializeRGB(colorData);
14	console.log(rgbComponentValue.toString());
15}

No vulnerabilities found.

10

Maintained

Determines if the project is "actively maintained".

10

Security-Policy

Determines if the project has published a security policy.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

License

Determines if the project has defined a license.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

7

SAST

Determines if the project uses static code analysis.

3

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

3

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 3

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-preset-env.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/deploy-preset-env.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-preset-env.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/deploy-preset-env.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/labeler.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/labeler.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/lint.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/lint.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/test.yml/main?enable=pin
Warn: npmCommand not pinned by hash: .github/workflows/test.yml:98
Info: 0 out of 11 GitHub-owned GitHubAction dependencies pinned
Info: 6 out of 7 npmCommand dependencies pinned

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Fuzzing

Determines if the project uses fuzzing.

Score

5.9

/10

Last Scanned on 2025-01-27

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More