npmpackage.info

Gathering detailed insights and metrics for autoprefixer

Other packages similar to autoprefixer

autoprefixer-loader

3.2.0

[deprecated] Autoprefixer loader for webpack

gulp-autoprefixer

9.0.0

Prefix CSS

@types/autoprefixer

10.2.4

Stub TypeScript definitions entry for autoprefixer, which provides its own types definitions

autoprefixer-core

6.0.1

CLI-less core of Autoprefixer to use in plugins

Gathering detailed insights and metrics for autoprefixer

autoprefixer

Parse CSS and add vendor prefixes to rules by Can I Use

10.4.20

21,784

MIT

JavaScript

54.19 kB

4,960,792,071 3.2

Installations

npm install autoprefixer

Developer Guide

BETA

Typescript

Yes

Module System

CommonJS

Min. Node Version

^10 || ^12 || >=14

Node Version

20.12.2

NPM Version

10.5.0 Score

95.8

Supply Chain

90.2

Quality

78.5

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

1

Total

341

Closed

62

Merged

278

Issues

Open

39

Total

1,157

Closed

1,118

Releases

199

10.4.20

Published on 02 Aug 2024

10.4.19

Published on 20 Mar 2024

10.4.18

Published on 01 Mar 2024

10.4.17

Published on 17 Jan 2024

10.4.16

Published on 20 Sept 2023

10.4.15

Published on 20 Sept 2023

View all 199 releases

Contributors

191

Unable to fetch Contributors

View all 191 contributors

Languages

JavaScript

CSS

JavaScript (62.97%)

CSS (37.03%)

Developer

postcss

Download Statistics

Total Downloads

4,960,792,071

Last Day

3,881,330

Last Week

17,627,700

Last Month

79,754,439

Last Year

1,029,527,638

GitHub Statistics

21,784 Stars

2,644 Commits

1,254 Forks

376 Watching

4 Branches

191 Contributors

Bundle Size

288.19 kB

Minified

54.19 kB

Minified + Gzipped

Bundlephobia

Sponsor this package

https://opencollective.com/postcss/https://tidelift.com/funding/github/npm/autoprefixer https://github.com/sponsors/ai

Maintainers

Package Meta Information

Latest Version

10.4.20

Package Id

autoprefixer@10.4.20

Unpacked Size

194.45 kB

Size

45.36 kB

File Count

NPM Version

10.5.0

Node Version

20.12.2

Publised On

02 Aug 2024

Total Downloads

Cumulative downloads

Total Downloads

4,960,792,071

Last day

-4.7%

3,881,330

Compared to previous day

Last week

-16.5%

17,627,700

Compared to previous week

Last month

4.9%

79,754,439

Compared to previous month

Last year

3.2%

1,029,527,638

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

browserslist caniuse-lite fraction.js normalize-range picocolors postcss-value-parser

Peer Dependencies

postcss

Versions

Autoprefixer

PostCSS plugin to parse CSS and add vendor prefixes to CSS rules using values from Can I Use. It is recommended by Google and used in Twitter and Alibaba.

Write your CSS rules without vendor prefixes (in fact, forget about them entirely):

1::placeholder {
2  color: gray;
3}
4
5.image {
6  background-image: url(image@1x.png);
7}
8@media (min-resolution: 2dppx) {
9  .image {
10    background-image: url(image@2x.png);
11  }
12}

Autoprefixer will use the data based on current browser popularity and property support to apply prefixes for you. You can try the interactive demo of Autoprefixer.

1::-moz-placeholder {
2  color: gray;
3}
4::placeholder {
5  color: gray;
6}
7
8.image {
9  background-image: url(image@1x.png);
10}
11@media (-webkit-min-device-pixel-ratio: 2),
12       (min-resolution: 2dppx) {
13  .image {
14    background-image: url(image@2x.png);
15  }
16}

Twitter account for news and releases: @autoprefixer.

Docs

Read full docs here.

No vulnerabilities found.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

7

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

1

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Maintained

Determines if the project is "actively maintained".

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 0

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/postcss/autoprefixer/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/postcss/autoprefixer/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/postcss/autoprefixer/test.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/postcss/autoprefixer/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/postcss/autoprefixer/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/postcss/autoprefixer/test.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/postcss/autoprefixer/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/postcss/autoprefixer/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/postcss/autoprefixer/test.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/postcss/autoprefixer/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/postcss/autoprefixer/test.yml/main?enable=pin
Info: 0 out of 7 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 4 third-party GitHubAction dependencies pinned

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

SAST

Determines if the project uses static code analysis.

Score

3.2

/10

Last Scanned on 2025-01-27

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More