Gathering detailed insights and metrics for postcss-calc
Gathering detailed insights and metrics for postcss-calc
Installations
npm install postcss-calcDeveloper Guide
BETA
Typescript
Yes
Module System
CommonJS
Min. Node Version
^18.12 || ^20.9 || >=22.0
Node Version
22.11.0
NPM Version
11.1.0
Score
98.7
Supply Chain
100
Quality
84.9
Maintenance
100
Vulnerability
100
License
Releases
30
Languages
2
JavaScript
Yacc
JavaScript (83.13%)
Yacc (16.87%)
Developer
postcss
Download Statistics
Total Downloads
3,155,794,994
Last Day
615,029
Last Week
11,769,737
Last Month
51,303,711
Last Year
574,415,753
GitHub Statistics
MIT License
217 Stars
208 Commits
34 Forks
15 Watchers
6 Branches
31 Contributors
Updated on May 10, 2025
Bundle Size
92.77 kB
Minified
24.58 kB
Minified + Gzipped
Maintainers
7
Package Meta Information
Latest Version
10.1.1
Package Id
postcss-calc@10.1.1
Unpacked Size
159.31 kB
Size
39.46 kB
File Count
15
NPM Version
11.1.0
Node Version
22.11.0
Published on
Jan 31, 2025
Total Downloads
Cumulative downloads
Total Downloads
3,155,794,994
Last Day
-8.5%
615,029
Compared to previous day
Last Week
-9.6%
11,769,737
Compared to previous week
Last Month
2%
51,303,711
Compared to previous month
Last Year
3.9%
574,415,753
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
2
Peer Dependencies
1
PostCSS Calc 
PostCSS Calc lets you reduce calc() references whenever it's possible.
When multiple units are mixed together in the same expression, the calc()
statement is left as is, to fallback to the W3C calc() implementation.
Installation
1npm install postcss-calc
Usage
1// dependencies 2var fs = require("fs") 3var postcss = require("postcss") 4var calc = require("postcss-calc") 5 6// css to be processed 7var css = fs.readFileSync("input.css", "utf8") 8 9// process css 10var output = postcss() 11 .use(calc()) 12 .process(css) 13 .css
Using this input.css:
1h1 { 2 font-size: calc(16px * 2); 3 height: calc(100px - 2em); 4 width: calc(2*var(--base-width)); 5 margin-bottom: calc(16px * 1.5); 6}
you will get:
1h1 { 2 font-size: 32px; 3 height: calc(100px - 2em); 4 width: calc(2*var(--base-width)); 5 margin-bottom: 24px 6}
Checkout tests for more examples.
Options
precision (default: 5)
Allow you to define the precision for decimal numbers.
1var out = postcss() 2 .use(calc({precision: 10})) 3 .process(css) 4 .css
preserve (default: false)
Allow you to preserve calc() usage in output so browsers will handle decimal precision themselves.
1var out = postcss() 2 .use(calc({preserve: true})) 3 .process(css) 4 .css
warnWhenCannotResolve (default: false)
Adds warnings when calc() are not reduced to a single value.
1var out = postcss() 2 .use(calc({warnWhenCannotResolve: true})) 3 .process(css) 4 .css
mediaQueries (default: false)
Allows calc() usage as part of media query declarations.
1var out = postcss() 2 .use(calc({mediaQueries: true})) 3 .process(css) 4 .css
selectors (default: false)
Allows calc() usage as part of selectors.
1var out = postcss() 2 .use(calc({selectors: true})) 3 .process(css) 4 .css
Example:
1div[data-size="calc(3*3)"] { 2 width: 100px; 3}
Related PostCSS plugins
To replace the value of CSS custom properties at build time, try PostCSS Custom Properties.
Contributing
Work on a branch, install dev-dependencies, respect coding style & run tests before submitting a bug fix or a feature.
1git clone git@github.com:postcss/postcss-calc.git 2git checkout -b patch-1 3npm install 4npm test
Changelog
License
No vulnerabilities found.
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
GitHub workflow tokens follow principle of least privilege
Details
- Info: found token with 'none' permissions: .github/workflows/test.yml:1
- Info: no jobLevel write permissions found
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: MIT License: LICENSE:0
Reason
4 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-4xcv-9jjx-gfj3
- Warn: Project is vulnerable to: GHSA-p9pc-299p-vxgp
Reason
2 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 3
Reason
Found 3/24 approved changesets -- score normalized to 1
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/postcss/postcss-calc/test.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/postcss/postcss-calc/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/postcss/postcss-calc/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/postcss/postcss-calc/test.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/postcss/postcss-calc/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/postcss/postcss-calc/test.yml/master?enable=pin
- Info: 0 out of 4 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 2 third-party GitHubAction dependencies pinned
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
branch protection not enabled on development/release branches
Details
- Warn: branch protection not enabled for branch 'master'
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 27 are checked with a SAST tool
Score
4.4
/10
Last Scanned on 2025-06-23
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More