autoprefixer
Parse CSS and add vendor prefixes to CSS rules using values from the Can I Use website
88%
Total Score
90
100
95
80
100
Health Score Breakdown
One contributor made 25 of 26 recent commits, creating concentration risk; however, a second contributor remains active and the repository is organization-owned, which provides some handoff capacity.
The repository uses build tooling, but no security-scanning tools were detected. This is a modest transparency and assurance gap, partially offset by the active project and provenance attestation.
No repository security policy was found, leaving vulnerability-reporting and response expectations unclear for a widely used dependency.
One workflow, including release.yml, has no top-level token permissions declaration, while no workflow requests top-level write access and another declares read-only permissions. The missing declaration is a limited workflow-hardening gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 picocolors Version ^1.1.1 | — | — |
fraction.js Version ^5.3.4 | — | — |
browserslist Version ^4.28.9 | — | — |
caniuse-lite Version ^1.0.30001810 | — | — |
postcss-value-parser Version ^4.2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 25 days ago
- Created
- 13 years ago
- Unpacked Size
- 0.2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.