@asamuzakjp/css-color
CSS color - Resolve and convert CSS colors.
82%
Total Score
healthy
Active releases and tested source support adoption, but one maintainer and unpinned Actions references limit confidence.
Health Score Breakdown
The repository is owned by an individual rather than an organization, so the concentrated contribution pattern has less institutional backup.
The top contributor made 74 of 77 recent commits, or about 96%, so maintenance is highly concentrated despite three additional contributors.
The workflow audit completed cleanly, uses read-only permissions, and found no dangerous sinks or audit findings; however, both of its two action references are unpinned, weakening reproducibility and update safety.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-199800 @asamuzakjp/css-color is vulnerable to Denial of Service (DoS) in versions 0.0.1 - 7.0.0. | 0.0.1 - 7.0.0 | Medium |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 lru-cache Version ^11.5.3 | — | — |
@csstools/css-calc Version ^3.4.3 | — | — |
@csstools/css-tokenizer Version ^4.0.2 | — | — |
@csstools/css-color-parser Version ^4.2.6 | — | — |
@csstools/css-parser-algorithms Version ^4.0.2 | — | — |
Weekly Downloads
Info
- Last Published
- 8 hours ago
- Created
- 2 years ago
- Unpacked Size
- 0.5 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.