Gathering detailed insights and metrics for postcss-merge-rules-plus
Gathering detailed insights and metrics for postcss-merge-rules-plus
Installations
npm install postcss-merge-rules-plusDeveloper Guide
BETA
Typescript
Yes
Module System
CommonJS
Min. Node Version
>=12.0.0
Node Version
16.13.1
NPM Version
8.1.2
Score
67.8
Supply Chain
96.7
Quality
74.3
Maintenance
100
Vulnerability
99.3
License
Releases
Unable to fetch releases
Languages
1
TypeScript
TypeScript (100%)
Developer
heyymarco
Download Statistics
Total Downloads
61,298
Last Day
17
Last Week
78
Last Month
376
Last Year
12,880
GitHub Statistics
MIT License
2 Stars
4 Commits
4 Forks
1 Watchers
1 Branches
1 Contributors
Updated on Apr 19, 2024
Bundle Size
1.12 MB
Minified
95.76 kB
Minified + Gzipped
Maintainers
1
Package Meta Information
Latest Version
2.0.0
Package Id
postcss-merge-rules-plus@2.0.0
Unpacked Size
46.41 kB
Size
13.07 kB
File Count
15
NPM Version
8.1.2
Node Version
16.13.1
Total Downloads
Cumulative downloads
Total Downloads
61,298
Peer Dependencies
1
postcss-merge-rules-plus
PostCSS plugin for combining css rules (selectors) that have fully/partially identical declarations.
Features
- Combines selectors with fully identical rules.
- Combines selectors with partially identical rules.
- Combines selectors with the same selector declaration.
Example
Input
1.a { position: absolute; display: block; color: red; background: pink; } 2.b { position: absolute; display: block; } 3.c { position: absolute; display: inline; color: red; background: pink; opacity: 0.5; } 4.d { position: absolute; display: block; opacity: 0.5; z-index: 2; text-align: center; }
Output
1.a, .b, .c, .d { position: absolute; } 2.a, .b, .d { display: block; } 3.a, .c { color: red; background: pink; } 4.c, .d { opacity: 0.5; } 5.c { display: inline; } 6.d { z-index: 2; text-align: center; }
Usage
Step 1: Install plugin:
1npm install --save-dev postcss postcss-merge-rules-plus
Step 2: Check you project for existed PostCSS config: postcss.config.js
in the project root, "postcss" section in package.json
or postcss in bundle config.
If you do not use PostCSS, add it according to official docs and set this plugin in settings.
Step 3: Add the plugin to plugins list:
1module.exports = { 2 plugins: [ 3+ require('postcss-merge-rules-plus'), 4 require('autoprefixer') 5 ] 6}
Usage
1import { src, dest } from 'gulp'; 2import gutil from 'gulp-util'; 3import postcss from 'gulp-postcss'; 4import mergeRulePlus from 'postcss-merge-rules-plus'; 5 6 7 8src('test3.css') 9.pipe( 10 postcss(/*plugins:*/[ 11 mergeRulePlus() 12 ]) 13) 14.on('error', gutil.log) 15.pipe(dest('test/')) 16;
Please Support Us
A lot of coffee has been spent for making this plugins. Please buy me a cup of coffee to support me continue to develop & improve this application. Visit: ko-fi.com
Contributing
Pull requests are welcome. For major changes, please open an issue first to discuss what you would like to change.
Please make sure to update tests as appropriate.
License
No vulnerabilities found.
Reason
no binaries found in the repo
Reason
no dangerous workflow patterns detected
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: MIT License: LICENSE:0
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/test.yml:1
- Info: no jobLevel write permissions found
Reason
Found 0/4 approved changesets -- score normalized to 0
Reason
0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/heyymarco/postcss-merge-rules-plus/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/heyymarco/postcss-merge-rules-plus/test.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/heyymarco/postcss-merge-rules-plus/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/heyymarco/postcss-merge-rules-plus/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/heyymarco/postcss-merge-rules-plus/test.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/heyymarco/postcss-merge-rules-plus/test.yml/master?enable=pin
- Info: 0 out of 4 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 2 third-party GitHubAction dependencies pinned
Reason
no SAST tool detected
Details
- Warn: no pull requests merged into dev branch
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
branch protection not enabled on development/release branches
Details
- Warn: branch protection not enabled for branch 'master'
Reason
14 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8
- Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92
- Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h
- Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55
- Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
- Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7
- Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q
Score
2.5
/10
Last Scanned on 2025-06-30
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More