This release appears healthy and suitable to depend on: it is a stable, non-deprecated major release with 32 releases over roughly 2 years, 13 releases in the last 12 months, current repository activity, organizational backing, documented licensing, bundled type declarations, repository tests, security scanning, and no install-time lifecycle scripts. The main concerns are absent build provenance, a repository/package identity mismatch that is not resolved by a README mention, and highly concentrated recent commit activity, although the organization backing reduces the bus-factor concern. Overall, these are transparency and resilience gaps rather than evidence of abandonment.
88%
Total Score
100
100
94
80
50
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@csstools/utilities Version ^3.0.0 | — | — |
@csstools/css-tokenizer Version ^4.0.0 | — | — |
@csstools/css-color-parser Version ^4.2.2 | — | — |
@csstools/css-parser-algorithms Version ^4.0.0 | — | — |
@csstools/postcss-progressive-custom-properties Version ^5.1.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.