@csstools/postcss-font-format-keywords
Use unquoted format on @font-face CSS definitions.
42%
Total Score
88
100
81
100
Health Score Breakdown
The package name wraps the much more established postcss name, and the README identifies the relationship. Consumers seeking postcss could select this different package, creating a serious identity risk.
The package has existed for about 4 years and released version 5.0.0 recently, but only one release appeared in the last 12 months with a median interval of about 164 days.
All 276 recent commits came from one contributor, leaving maintenance highly concentrated. Organization backing helps with handoff capacity but does not remove the current concentration risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 @csstools/utilities Version ^3.0.0 | — | — |
postcss-value-parser Version ^4.2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 9 months ago
- Created
- 4 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.