npmpackage.info

Gathering detailed insights and metrics for @csstools/postcss-normalize-display-values

@csstools/postcss-normalize-display-values - 4.0.0 | npmpackage.info

@csstools/postcss-normalize-display-values

PostCSS Tools and Plugins

4.0.0

981

MIT-0

CSS

2.18 kB

567,134,860 5.8

Installations

npm install @csstools/postcss-normalize-display-values

Developer Guide

BETA

Typescript

Yes

Module System

ESM

Min. Node Version

>=18

Node Version

22.1.0

NPM Version

10.7.0 Score

98.3

Supply Chain

90.1

Quality

80.2

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

4

Total

1,230

Closed

170

Merged

1,056

Issues

Open

6

Total

364

Closed

358

Releases

Unable to fetch releases

Languages

CSS

JavaScript

TypeScript

HTML

Nunjucks

Shell

SCSS

CSS (43.25%)

JavaScript (30.24%)

TypeScript (22.9%)

HTML (3.03%)

Nunjucks (0.48%)

Shell (0.1%)

Developer

csstools

Download Statistics

Total Downloads

567,134,860

Last Day

243,489

Last Week

4,366,589

Last Month

18,670,353

Last Year

203,854,236

GitHub Statistics

MIT-0 License

981 Stars

4,379 Commits

78 Forks

9 Watchers

6 Branches

132 Contributors

Updated on Jun 30, 2025

Bundle Size

5.96 kB

Minified

2.18 kB

Minified + Gzipped

Bundlephobia

Sponsor this package

https://github.com/sponsors/csstools https://opencollective.com/csstools

Maintainers

View All 132 Contributors

Package Meta Information

Latest Version

4.0.0

Package Id

@csstools/postcss-normalize-display-values@4.0.0

Unpacked Size

8.08 kB

Size

3.16 kB

File Count

NPM Version

10.7.0

Node Version

22.1.0

Published on

Aug 03, 2024

Total Downloads

Cumulative downloads

Total Downloads

567,134,860

Last Day

-7.5%

243,489

Compared to previous day

Last Week

-9.3%

4,366,589

Compared to previous week

Last Month

2.5%

18,670,353

Compared to previous month

Last Year

5.8%

203,854,236

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

postcss-value-parser

Peer Dependencies

postcss

PostCSS Normalize Display Values

PostCSS Normalize Display Values lets you specify definition of outer and inner displays types for an element.

1.element {
2  display: inline flow-root;
3}
4
5/* becomes */
6
7.element {
8  display: inline-block;
9  display: inline flow-root;
10}

See prior work by cssnano here postcss-normalize-display-values To ensure long term maintenance and to provide the needed features this plugin was recreated based on cssnano's work.

Usage

Add PostCSS Normalize Display Values to your project:

1npm install postcss @csstools/postcss-normalize-display-values --save-dev

Use it as a PostCSS plugin:

1const postcss = require('postcss');
2const postcssNormalizeDisplayValues = require('@csstools/postcss-normalize-display-values');
3
4postcss([
5  postcssNormalizeDisplayValues(/* pluginOptions */)
6]).process(YOUR_CSS /*, processOptions */);

PostCSS Normalize Display Values runs in all Node environments, with special instructions for:

Node	PostCSS CLI	Webpack	Gulp	Grunt

Options

preserve

The preserve option determines whether the original source is preserved. By default, it is preserved.

1postcssNormalizeDisplayValues({ preserve: false })

1.element {
2  display: inline flow-root;
3}
4
5/* becomes */
6
7.element {
8  display: inline-block; 
9}

No vulnerabilities found.

10

Maintained

Determines if the project is "actively maintained".

10

License

Determines if the project has defined a license.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Security-Policy

Determines if the project has published a security policy.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

9

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

7

SAST

Determines if the project uses static code analysis.

3

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

3

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 3

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-preset-env.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/deploy-preset-env.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-preset-env.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/deploy-preset-env.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/labeler.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/labeler.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/lint.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/lint.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/test.yml/main?enable=pin
Warn: npmCommand not pinned by hash: .github/workflows/test.yml:98
Info: 0 out of 11 GitHub-owned GitHubAction dependencies pinned
Info: 6 out of 7 npmCommand dependencies pinned

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Fuzzing

Determines if the project uses fuzzing.

Score

5.8

/10

Last Scanned on 2025-06-30

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More