npmpackage.info

Gathering detailed insights and metrics for postcss-nesting

postcss-nesting

PostCSS Tools and Plugins

13.0.2

981

MIT-0

CSS

17.01 kB

1,720,051,916 5.8

Installations

npm install postcss-nesting

Developer Guide

BETA

Typescript

Yes

Module System

ESM

Min. Node Version

>=18

Node Version

22.12.0

NPM Version

10.9.0 Score

98.4

Supply Chain

99.4

Quality

86.3

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

4

Total

1,230

Closed

170

Merged

1,056

Issues

Open

6

Total

364

Closed

358

Releases

Unable to fetch releases

Languages

CSS

JavaScript

TypeScript

HTML

Nunjucks

Shell

SCSS

CSS (43.25%)

JavaScript (30.24%)

TypeScript (22.9%)

HTML (3.03%)

Nunjucks (0.48%)

Shell (0.1%)

Developer

csstools

Download Statistics

Total Downloads

1,720,051,916

Last Day

369,027

Last Week

6,769,007

Last Month

28,850,459

Last Year

330,068,123

GitHub Statistics

MIT-0 License

981 Stars

4,379 Commits

78 Forks

9 Watchers

6 Branches

132 Contributors

Updated on Jun 30, 2025

Bundle Size

66.49 kB

Minified

17.01 kB

Minified + Gzipped

Bundlephobia

Sponsor this package

https://github.com/sponsors/csstools https://opencollective.com/csstools

Maintainers

View All 132 Contributors

Package Meta Information

Latest Version

13.0.2

Package Id

postcss-nesting@13.0.2

Unpacked Size

31.44 kB

Size

7.01 kB

File Count

NPM Version

10.9.0

Node Version

22.12.0

Published on

Jun 10, 2025

Total Downloads

Cumulative downloads

Total Downloads

1,720,051,916

Last Day

-13.1%

369,027

Compared to previous day

Last Week

-8.9%

6,769,007

Compared to previous week

Last Month

2.8%

28,850,459

Compared to previous month

Last Year

-4.1%

330,068,123

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

@csstools/selector-resolve-nested @csstools/selector-specificity postcss-selector-parser

Peer Dependencies

postcss

PostCSS Nesting

npm install postcss-nesting --save-dev

PostCSS Nesting lets you nest style rules inside each other, following the CSS Nesting specification.

If you want nested rules the same way Sass works you might want to use PostCSS Nested instead.

1.foo {
2	color: red;
3
4	&:hover {
5		color: green;
6	}
7
8	> .bar {
9		color: blue;
10	}
11
12	@media (prefers-color-scheme: dark) {
13		color: cyan;
14	}
15
16	color: pink;
17}
18
19/* becomes */
20
21.foo {
22	color: red;
23}
24.foo:hover {
25		color: green;
26	}
27.foo  > .bar {
28		color: blue;
29	}
30@media (prefers-color-scheme: dark) {
31	.foo {
32		color: cyan;
33}
34	}
35.foo {
36
37	color: pink;
38}

Usage

Add PostCSS Nesting to your project:

1npm install postcss postcss-nesting --save-dev

Use it as a PostCSS plugin:

1const postcss = require('postcss');
2const postcssNesting = require('postcss-nesting');
3
4postcss([
5	postcssNesting(/* pluginOptions */)
6]).process(YOUR_CSS /*, processOptions */);

Options

edition

The CSS nesting feature has gone through several iterations and what is currently implemented in browsers is not the same as what was originally proposed. This plugin dates back to the original proposal and you might have written your CSS expecting this older behavior.

You can pick the older behavior by setting the edition option.
The edition values correspond with rough dates when of a particular version of the specification:

2024-02 (default)
2021

[!TIP] If you wrote nested rules with @nest you definitely want to set the edition to 2021.
If you are unsure than you should try to omit the edition option and use the default.

Eventually we will remove support for the older edition, and this plugin option, so it is strongly advised to update your CSS to the latest edition.

1postcssNesting({
2	edition: '2024-02'
3})

`2024-02` (default)

usage of :is() pseudo-class in the generated CSS is no longer optional. However you can add postcss-is-pseudo-class to transpile further
at rules are not combined with the and keyword
@nest is removed from the specification
declarations and nested rules/at-rules are no longer re-ordered

`2021`

This version is a continuation of what existed before CSS nesting was implemented in browsers.
It made a few non-invasive changes to keep up with implementations but it is falling behind.

1.foo {
2	color: red;
3
4	&:hover {
5		color: green;
6	}
7
8	> .bar {
9		color: blue;
10	}
11
12	@media (prefers-color-scheme: dark) {
13		color: cyan;
14	}
15
16	color: pink;
17}
18
19/* becomes */
20
21.foo {
22	color: red;
23
24	color: pink;
25}
26.foo:hover {
27		color: green;
28	}
29.foo > .bar {
30		color: blue;
31	}
32@media (prefers-color-scheme: dark) {
33	.foo {
34		color: cyan;
35}
36	}

noIsPseudoSelector (edition: `2021`)

Specificity

Before :

1#alpha,
2.beta {
3	&:hover {
4		order: 1;
5	}
6}

After without the option :

1postcssNesting()

1:is(#alpha,.beta):hover {
2	order: 1;
3}

.beta:hover has specificity as if .beta where an id selector, matching the specification.

specificity: 1, 1, 0

After with the option :

1postcssNesting({
2	noIsPseudoSelector: true
3})

1#alpha:hover, .beta:hover {
2	order: 1;
3}

.beta:hover has specificity as if .beta where a class selector, conflicting with the specification.

specificity: 0, 2, 0

Complex selectors

Before :

1.alpha > .beta {
2	& + & {
3		order: 2;
4	}
5}

After without the option :

1postcssNesting()

1:is(.alpha > .beta) + :is(.alpha > .beta) {
2	order: 2;
3}

After with the option :

1postcssNesting({
2	noIsPseudoSelector: true
3})

1.alpha > .beta + .alpha > .beta {
2	order: 2;
3}

this is a different selector than expected as .beta + .alpha matches .beta followed by .alpha.
avoid these cases when you disable :is()
writing the selector without nesting is advised here

1/* without nesting */
2.alpha > .beta + .beta {
3	order: 2;
4}

No vulnerabilities found.

10

Maintained

Determines if the project is "actively maintained".

10

License

Determines if the project has defined a license.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Security-Policy

Determines if the project has published a security policy.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

9

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

7

SAST

Determines if the project uses static code analysis.

3

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

3

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 3

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-preset-env.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/deploy-preset-env.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-preset-env.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/deploy-preset-env.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/labeler.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/labeler.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/lint.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/lint.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/test.yml/main?enable=pin
Warn: npmCommand not pinned by hash: .github/workflows/test.yml:98
Info: 0 out of 11 GitHub-owned GitHubAction dependencies pinned
Info: 6 out of 7 npmCommand dependencies pinned

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Fuzzing

Determines if the project uses fuzzing.

Score

5.8

/10

Last Scanned on 2025-06-30

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

Other packages similar to postcss-nesting

Other packages similar to postcss-nesting

postcss-nesting

Installations

Developer Guide

Yes

ESM

>=18

22.12.0

10.9.0

Score

Pull Requests

4

1,230

170

1,056

Issues

6

364

358

Releases

Unable to fetch releases

Languages

Developer

Download Statistics

GitHub Statistics

Bundle Size

66.49 kB

17.01 kB

Sponsor this package

Maintainers

Package Meta Information

Total Downloads

1,720,051,916

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

Peer Dependencies

PostCSS Nesting

Usage

Options

edition

2024-02 (default)

2021

noIsPseudoSelector (edition: 2021)

Specificity

Complex selectors

10

10

10

10

10

9

7

3

3

0

0

0

0

5.8

/10

`2024-02` (default)

`2021`

noIsPseudoSelector (edition: `2021`)