npmpackage.info

Gathering detailed insights and metrics for postcss-nesting

postcss-nesting

PostCSS Tools and Plugins

13.0.1

960

MIT-0

CSS

16.94 kB

1,697,610,643 5.9

Installations

npm install postcss-nesting

Developer Guide

BETA

Typescript

Yes

Module System

ESM

Min. Node Version

>=18

Node Version

22.1.0

NPM Version

10.7.0 Score

98.4

Supply Chain

99.4

Quality

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

3

Total

1,197

Closed

165

Merged

1,029

Issues

Open

6

Total

357

Closed

351

Releases

Unable to fetch releases

Languages

CSS

JavaScript

TypeScript

HTML

Nunjucks

Shell

SCSS

CSS (43.36%)

JavaScript (30.33%)

TypeScript (22.68%)

HTML (3.06%)

Nunjucks (0.48%)

Shell (0.1%)

Developer

csstools

Download Statistics

Total Downloads

1,697,610,643

Last Day

1,183,615

Last Week

6,409,186

Last Month

27,637,082

Last Year

328,793,572

GitHub Statistics

MIT-0 License

960 Stars

4,266 Commits

75 Forks

9 Watchers

4 Branches

130 Contributors

Updated on May 09, 2025

Bundle Size

66.26 kB

Minified

16.94 kB

Minified + Gzipped

Bundlephobia

Sponsor this package

https://github.com/sponsors/csstools https://opencollective.com/csstools

Maintainers

View All 130 Contributors

Package Meta Information

Latest Version

13.0.1

Package Id

postcss-nesting@13.0.1

Unpacked Size

31.66 kB

Size

7.03 kB

File Count

NPM Version

10.7.0

Node Version

22.1.0

Published on

Oct 23, 2024

Total Downloads

Cumulative downloads

Total Downloads

1,697,610,643

Last Day

48.5%

1,183,615

Compared to previous day

Last Week

4.9%

6,409,186

Compared to previous week

Last Month

-6.4%

27,637,082

Compared to previous month

Last Year

-5.4%

328,793,572

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

@csstools/selector-resolve-nested @csstools/selector-specificity postcss-selector-parser

Peer Dependencies

postcss

PostCSS Nesting

npm install postcss-nesting --save-dev

PostCSS Nesting lets you nest style rules inside each other, following the CSS Nesting specification.

If you want nested rules the same way Sass works you might want to use PostCSS Nested instead.

1.foo {
2	color: red;
3
4	&:hover {
5		color: green;
6	}
7
8	> .bar {
9		color: blue;
10	}
11
12	@media (prefers-color-scheme: dark) {
13		color: cyan;
14	}
15
16	color: pink;
17}
18
19/* becomes */
20
21.foo {
22	color: red;
23}
24.foo:hover {
25		color: green;
26	}
27.foo  > .bar {
28		color: blue;
29	}
30@media (prefers-color-scheme: dark) {
31	.foo {
32		color: cyan;
33}
34	}
35.foo {
36
37	color: pink;
38}

Usage

Add PostCSS Nesting to your project:

1npm install postcss postcss-nesting --save-dev

Use it as a PostCSS plugin:

1const postcss = require('postcss');
2const postcssNesting = require('postcss-nesting');
3
4postcss([
5	postcssNesting(/* pluginOptions */)
6]).process(YOUR_CSS /*, processOptions */);

Options

edition

The CSS nesting feature has gone through several iterations and what is currently implemented in browsers is not the same as what was originally proposed. This plugin dates back to the original proposal and you might have written your CSS expecting this older behavior.

You can pick the older behavior by setting the edition option.
The edition values correspond with rough dates when of a particular version of the specification:

2024-02 (default)
2021

[!TIP] If you wrote nested rules with @nest you definitely want to set the edition to 2021.
If you are unsure than you should try to omit the edition option and use the default.

Eventually we will remove support for the older edition, and this plugin option, so it is strongly advised to update your CSS to the latest edition.

1postcssNesting({
2	edition: '2024-02'
3})

`2024-02` (default)

usage of :is() pseudo-class is no longer optional
at rules are not combined with the and keyword
@nest is removed from the specification
declarations and nested rules/at-rules are no longer re-ordered

`2021`

This version is a continuation of what existed before CSS nesting was implemented in browsers.
It made a few non-invasive changes to keep up with implementations but it is falling behind.

1.foo {
2	color: red;
3
4	&:hover {
5		color: green;
6	}
7
8	> .bar {
9		color: blue;
10	}
11
12	@media (prefers-color-scheme: dark) {
13		color: cyan;
14	}
15
16	color: pink;
17}
18
19/* becomes */
20
21.foo {
22	color: red;
23
24	color: pink;
25}
26.foo:hover {
27		color: green;
28	}
29.foo > .bar {
30		color: blue;
31	}
32@media (prefers-color-scheme: dark) {
33	.foo {
34		color: cyan;
35}
36	}

noIsPseudoSelector (edition: `2021`)

Specificity

Before :

1#alpha,
2.beta {
3	&:hover {
4		order: 1;
5	}
6}

After without the option :

1postcssNesting()

1:is(#alpha,.beta):hover {
2	order: 1;
3}

.beta:hover has specificity as if .beta where an id selector, matching the specification.

specificity: 1, 1, 0

After with the option :

1postcssNesting({
2	noIsPseudoSelector: true
3})

1#alpha:hover, .beta:hover {
2	order: 1;
3}

.beta:hover has specificity as if .beta where a class selector, conflicting with the specification.

specificity: 0, 2, 0

Complex selectors

Before :

1.alpha > .beta {
2	& + & {
3		order: 2;
4	}
5}

After without the option :

1postcssNesting()

1:is(.alpha > .beta) + :is(.alpha > .beta) {
2	order: 2;
3}

After with the option :

1postcssNesting({
2	noIsPseudoSelector: true
3})

1.alpha > .beta + .alpha > .beta {
2	order: 2;
3}

this is a different selector than expected as .beta + .alpha matches .beta followed by .alpha.
avoid these cases when you disable :is()
writing the selector without nesting is advised here

1/* without nesting */
2.alpha > .beta + .beta {
3	order: 2;
4}

No vulnerabilities found.

10

Maintained

Determines if the project is "actively maintained".

10

Security-Policy

Determines if the project has published a security policy.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

License

Determines if the project has defined a license.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

7

SAST

Determines if the project uses static code analysis.

3

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

3

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 3

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/codeql.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-preset-env.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/deploy-preset-env.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-preset-env.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/deploy-preset-env.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/labeler.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/labeler.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/lint.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/lint.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/csstools/postcss-plugins/test.yml/main?enable=pin
Warn: npmCommand not pinned by hash: .github/workflows/test.yml:98
Info: 0 out of 11 GitHub-owned GitHubAction dependencies pinned
Info: 6 out of 7 npmCommand dependencies pinned

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Fuzzing

Determines if the project uses fuzzing.

Score

5.9

/10

Last Scanned on 2025-05-05

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

Other packages similar to postcss-nesting

Other packages similar to postcss-nesting

postcss-nesting

Installations

Developer Guide

Yes

ESM

>=18

22.1.0

10.7.0

Score

Pull Requests

3

1,197

165

1,029

Issues

6

357

351

Releases

Unable to fetch releases

Languages

Developer

Download Statistics

GitHub Statistics

Bundle Size

66.26 kB

16.94 kB

Sponsor this package

Maintainers

Package Meta Information

Total Downloads

1,697,610,643

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

Peer Dependencies

PostCSS Nesting

Usage

Options

edition

2024-02 (default)

2021

noIsPseudoSelector (edition: 2021)

Specificity

Complex selectors

10

10

10

10

10

10

7

3

3

0

0

0

0

5.9

/10

`2024-02` (default)

`2021`

noIsPseudoSelector (edition: `2021`)