npmpackage.info

Gathering detailed insights and metrics for @csstools/postcss-progressive-custom-properties

Other packages similar to @csstools/postcss-progressive-custom-properties

postcss-env-function

7.0.0

Use env() variables in CSS

postcss-custom-properties

14.0.4

Use Custom Properties Queries in CSS

postcss-gap-properties

6.0.0

Use the gap, column-gap, and row-gap shorthand properties in CSS

postcss-place

10.0.0

Use a place-* shorthand for align-* and justify-* in CSS

Gathering detailed insights and metrics for @csstools/postcss-progressive-custom-properties

@csstools/postcss-progressive-custom-properties

PostCSS Tools and Plugins

4.0.0

911

MIT-0

CSS

4.00 kB

494,532,801 5.8

Installations

npm install @csstools/postcss-progressive-custom-properties

Score

96.3

Supply Chain

98.9

Quality

83.6

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

2

Total

1,134

Closed

148

Merged

984

Issues

Open

5

Total

344

Closed

339

Releases

Unable to fetch releases

Developer

csstools

Developer Guide

BETA

Module System

ESM

Min. Node Version

>=18

Typescript Support

Yes

Node Version

22.1.0

NPM Version

10.7.0 Statistics

911 Stars

4,090 Commits

72 Forks

11 Watching

3 Branches

131 Contributors

Updated on 27 Nov 2024

Bundle Size

26.49 kB

Minified

4.00 kB

Minified + Gzipped

Bundlephobia

Languages

CSS (43.44%)

JavaScript (30.18%)

TypeScript (22.78%)

HTML (3.02%)

Nunjucks (0.48%)

Shell (0.1%)

Total Downloads

Cumulative downloads

Total Downloads

494,532,801

Last day

-3%

789,384

Compared to previous day

Last week

2.6%

4,129,519

Compared to previous week

Last month

9.3%

17,258,008

Compared to previous month

Last year

2.6%

203,661,093

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

postcss-value-parser

Peer Dependencies

postcss

Versions

PostCSS Plugins

We are happy you're here!

This repository contains plugins, plugin-packs, utilities, CLI tools, ... to help you do more with CSS.

PostCSS Preset Env

Read more about PostCSS Preset Env or jump right in :

Install postcss-preset-env from npm.
Add postcss-preset-env to your configuration:

1const postcssPresetEnv = require('postcss-preset-env');
2
3const yourConfig = {
4	plugins: [
5		/* other plugins */
6		/* remove autoprefixer if you had it here, it's part of postcss-preset-env */
7		postcssPresetEnv({
8			/* pluginOptions */
9			features: {},
10		})
11	]
12}

Overview

packages
- css tokenizers and parsers
- common utilities
PostCSS plugins
PostCSS Preset Env
Stylelint plugins
cli's
sites
PostCSS recipes

Our current focus

Standard CSS transforms

We're trying to bring every reasonable CSS Spec into all the browsers.

First we keep track of new features through the CSSDB (see the repo). Then we do our best to create a PostCSS plugin that can convert that new syntax/function/rules so every browser can understand it.

While it's not always possible we're enabling over 50 features with these plugins!

Developer experience

We want it to be easier for you to be effective at writing CSS.
From time to time we will publish plugins that aren't related to a standard CSS spec but that we think will help developers.

Contributing

Thanks for being willing to contribute! Please read our contributing guide!

Acknowledgements

We could not do this work without the contributions of the community.
We appreciate all of you!

We want to thank:

everyone who submits bug reports and feature requests
everyone who contributes code
everyone who contributes financially:

We also want to thank these organizations and people for making their tools available to Open Source maintainers:

No vulnerabilities found.

10

Maintained

Determines if the project is "actively maintained".

10

Security-Policy

Determines if the project has published a security policy.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

License

Determines if the project has defined a license.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

9

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

7

SAST

Determines if the project uses static code analysis.

3

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 3

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-preset-env.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/deploy-preset-env.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-preset-env.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/deploy-preset-env.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/labeler.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/labeler.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/lint.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/lint.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/test.yml/main?enable=pin
Warn: npmCommand not pinned by hash: .github/workflows/test.yml:90
Info: 0 out of 11 GitHub-owned GitHubAction dependencies pinned
Info: 6 out of 7 npmCommand dependencies pinned

3

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Fuzzing

Determines if the project uses fuzzing.

Score

5.8

/10

Last Scanned on 2024-11-25

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More