Package Health

@csstools/postcss-contrast-color-function

Dynamically specify a text color with adequate contrast

Latest 3.0.15NPMNPM

43%

Total Score

unhealthy

Risky: its lookalike identity and missing repository reference outweigh strong maintenance signals.

Health Score Breakdown

Name lookalikedanger

The package name wraps the much more established `postcss` name, and its README identifies itself with that project. Although overlap is not measured and it does not claim to be a fork, this creates a serious identity risk for consumers seeking the original package.

Repo bus factorcaution

All 349 recent commits came from one contributor, leaving maintenance capacity concentrated. Organization backing partly compensates, but no second active contributor is shown.

Repo package mentioncaution

The linked repository is `csstools/postcss-plugins`, but it neither matches the package name nor mentions this package in its README, so the package-to-repository relationship is not transparent.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Direct Dependencies

DependencyLast ReleaseScore
@csstools/utilities
Version ^3.0.0
—
—
@csstools/css-tokenizer
Version ^4.0.2
—
—
@csstools/css-color-parser
Version ^4.2.6
—
—
@csstools/css-parser-algorithms
Version ^4.0.2
—
—
@csstools/postcss-progressive-custom-properties
Version ^5.1.4
—
—

Weekly Downloads

Info

Last Published
12 days ago
Created
2 years ago
Unpacked Size
0.1 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform