npmpackage.info

Gathering detailed insights and metrics for @csstools/postcss-media-queries-aspect-ratio-number-values

Other packages similar to @csstools/postcss-media-queries-aspect-ratio-number-values

@csstools/postcss-media-minmax

2.0.5

Use the range notation in CSS media queries

postcss-image-set-function

7.0.0

Display resolution-dependent images using the image-set() function in CSS

postcss-custom-media

11.0.5

Use Custom Media Queries in CSS

css-prefers-color-scheme

10.0.0

Use light and dark color schemes in all browsers

Gathering detailed insights and metrics for @csstools/postcss-media-queries-aspect-ratio-number-values

@csstools/postcss-media-queries-aspect-ratio-number-values

PostCSS Tools and Plugins

3.0.4

911

MIT-0

CSS

68,137,377 5.8

Installations

npm install @csstools/postcss-media-queries-aspect-ratio-number-values

Score

95.5

Supply Chain

84.2

Quality

91.8

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

2

Total

1,134

Closed

148

Merged

984

Issues

Open

5

Total

344

Closed

339

Releases

Unable to fetch releases

Developer

csstools

Developer Guide

BETA

Module System

ESM

Min. Node Version

>=18

Typescript Support

Yes

Node Version

22.1.0

NPM Version

10.7.0 Statistics

911 Stars

4,090 Commits

72 Forks

11 Watching

3 Branches

131 Contributors

Updated on 27 Nov 2024

Languages

CSS (43.44%)

JavaScript (30.18%)

TypeScript (22.78%)

HTML (3.02%)

Nunjucks (0.48%)

Shell (0.1%)

Total Downloads

Cumulative downloads

Total Downloads

68,137,377

Last day

5.1%

236,236

Compared to previous day

Last week

7.5%

1,222,073

Compared to previous week

Last month

14.8%

4,954,856

Compared to previous month

Last year

135.1%

47,801,953

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

@csstools/css-parser-algorithms @csstools/css-tokenizer @csstools/media-query-list-parser

Peer Dependencies

postcss

Versions

PostCSS Plugins

We are happy you're here!

This repository contains plugins, plugin-packs, utilities, CLI tools, ... to help you do more with CSS.

PostCSS Preset Env

Read more about PostCSS Preset Env or jump right in :

Install postcss-preset-env from npm.
Add postcss-preset-env to your configuration:

1const postcssPresetEnv = require('postcss-preset-env');
2
3const yourConfig = {
4	plugins: [
5		/* other plugins */
6		/* remove autoprefixer if you had it here, it's part of postcss-preset-env */
7		postcssPresetEnv({
8			/* pluginOptions */
9			features: {},
10		})
11	]
12}

Overview

packages
- css tokenizers and parsers
- common utilities
PostCSS plugins
PostCSS Preset Env
Stylelint plugins
cli's
sites
PostCSS recipes

Our current focus

Standard CSS transforms

We're trying to bring every reasonable CSS Spec into all the browsers.

First we keep track of new features through the CSSDB (see the repo). Then we do our best to create a PostCSS plugin that can convert that new syntax/function/rules so every browser can understand it.

While it's not always possible we're enabling over 50 features with these plugins!

Developer experience

We want it to be easier for you to be effective at writing CSS.
From time to time we will publish plugins that aren't related to a standard CSS spec but that we think will help developers.

Contributing

Thanks for being willing to contribute! Please read our contributing guide!

Acknowledgements

We could not do this work without the contributions of the community.
We appreciate all of you!

We want to thank:

everyone who submits bug reports and feature requests
everyone who contributes code
everyone who contributes financially:

We also want to thank these organizations and people for making their tools available to Open Source maintainers:

No vulnerabilities found.

10

Maintained

Determines if the project is "actively maintained".

10

Security-Policy

Determines if the project has published a security policy.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

License

Determines if the project has defined a license.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

9

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

7

SAST

Determines if the project uses static code analysis.

3

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 3

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-preset-env.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/deploy-preset-env.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-preset-env.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/deploy-preset-env.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/labeler.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/labeler.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/lint.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/lint.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/test.yml/main?enable=pin
Warn: npmCommand not pinned by hash: .github/workflows/test.yml:90
Info: 0 out of 11 GitHub-owned GitHubAction dependencies pinned
Info: 6 out of 7 npmCommand dependencies pinned

3

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Fuzzing

Determines if the project uses fuzzing.

Score

5.8

/10

Last Scanned on 2024-11-25

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More