Gathering detailed insights and metrics for vscode-css-languageservice-commonjs
Gathering detailed insights and metrics for vscode-css-languageservice-commonjs
CSS, LESS & SCSS language service extracted from VSCode to be reused, e.g in the Monaco editor.
Installations
npm install vscode-css-languageservice-commonjsDeveloper Guide
BETA
Typescript
No
Module System
CommonJS
Node Version
8.1.2
NPM Version
5.0.3
Releases
15
Languages
4
TypeScript
JavaScript
SCSS
CSS
TypeScript (93.07%)
JavaScript (6.56%)
SCSS (0.36%)
CSS (0.02%)
Developer
Microsoft
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
MIT License
348 Stars
1,137 Commits
195 Forks
33 Watchers
24 Branches
145 Contributors
Updated on Jun 30, 2025
Maintainers
1
Package Meta Information
Latest Version
0.0.1
Package Id
vscode-css-languageservice-commonjs@0.0.1
Size
119.50 kB
NPM Version
5.0.3
Node Version
8.1.2
Total Downloads
Cumulative downloads
Total Downloads
NaN
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dev Dependencies
8
vscode-css-languageservice
Language services for CSS, LESS and SCSS
Why?
The vscode-css-languageservice contains the language smarts behind the CSS, LESS and SCSS editing experience of Visual Studio Code and the Monaco editor.
- doValidation analyses an input string and returns syntax and lint errros.
- doComplete provides completion proposals for a given location.
- doHover provides a hover text for a given location.
- findDefinition finds the definition of the symbol at the given location.
- findReferences finds all references to the symbol at the given location.
- findDocumentHighlights finds all symbols connected to the given location.
- findDocumentSymbols provides all symbols in the given document
- doCodeActions evaluats code actions for the given location, typically to fix a problem.
- findColorSymbols evaluates all color symbols in the given document
- doRename renames all symbols connected to the given location.
Installation
npm install --save vscode-css-languageservice
API
1 2export interface LanguageService { 3 configure(raw: LanguageSettings): void; 4 doValidation(document: TextDocument, stylesheet: Stylesheet): Diagnostic[]; 5 parseStylesheet(document: TextDocument): Stylesheet; 6 doComplete(document: TextDocument, position: Position, stylesheet: Stylesheet): CompletionList; 7 doHover(document: TextDocument, position: Position, stylesheet: Stylesheet): Hover; 8 findDefinition(document: TextDocument, position: Position, stylesheet: Stylesheet): Location; 9 findReferences(document: TextDocument, position: Position, stylesheet: Stylesheet): Location[]; 10 findDocumentHighlights(document: TextDocument, position: Position, stylesheet: Stylesheet): DocumentHighlight[]; 11 findDocumentSymbols(document: TextDocument, stylesheet: Stylesheet): SymbolInformation[]; 12 doCodeActions(document: TextDocument, range: Range, context: CodeActionContext, stylesheet: Stylesheet): Command[]; 13 findColorSymbols(document: TextDocument, stylesheet: Stylesheet): Range[]; 14 doRename(document: TextDocument, position: Position, newName: string, stylesheet: Stylesheet): WorkspaceEdit; 15} 16 17export interface LanguageSettings { 18 validate?: boolean; 19 lint?: any; 20} 21
License
(MIT License)
Copyright 2016, Microsoft
No vulnerabilities found.
Reason
no dangerous workflow patterns detected
Reason
GitHub workflow tokens follow principle of least privilege
Details
- Info: found token with 'none' permissions: .github/workflows/node.js.yml:1
- Info: no jobLevel write permissions found
Reason
security policy file detected
Details
- Info: security policy file detected: SECURITY.md:1
- Info: Found linked content: SECURITY.md:1
- Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1
- Info: Found text in security policy: SECURITY.md:1
Reason
all changesets reviewed
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENSE.md:0
- Info: FSF or OSI recognized license: MIT License: LICENSE.md:0
Reason
0 existing vulnerabilities detected
Reason
9 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 9
Reason
branch protection is not maximal on development and all release branches
Details
- Info: 'allow deletion' disabled on branch 'main'
- Info: 'force pushes' disabled on branch 'main'
- Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'
- Warn: 'stale review dismissal' is disabled on branch 'main'
- Warn: required approving review count is 1 on branch 'main'
- Warn: codeowners review is required - but no codeowners file found in repo
- Info: 'last push approval' is required to merge on branch 'main'
- Info: status check found to merge onto on branch 'main'
- Info: PRs are required in order to make changes on branch 'main'
Reason
dependency not pinned by hash detected -- score normalized to 3
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/node.js.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/vscode-css-languageservice/node.js.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/node.js.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/microsoft/vscode-css-languageservice/node.js.yml/main?enable=pin
- Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned
- Info: 1 out of 1 npmCommand dependencies pinned
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 30 are checked with a SAST tool
Score
7.7
/10
Last Scanned on 2025-07-07
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More