critters
Inline critical CSS and lazy-load the rest.
15%
Total Score
0
64
50
Health Score Breakdown
The entire package is deprecated, and the registry directs users to the actively maintained fork at beasties. This is a direct indication that new dependencies should not be placed on this release.
The repository recorded zero commits and zero active maintainers in the last three months. This is consistent with the archived and deprecated status.
The linked GoogleChromeLabs repository is archived, making ongoing maintenance and issue response unlikely despite having been pushed in October 2024.
The package has 25 releases since April 2018, but none in the last 12 months; the latest release was in October 2024. The long release history shows maturity, but current inactivity supports the abandonment concern.
The repository has no security policy. This limits the documented path for reporting vulnerabilities, although it is secondary to the package's deprecation and archival.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2023-3481 critters is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.17 - 0.0.19. | 0.0.17 - 0.0.19 | Medium |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 chalk Version ^4.1.0 | — | — |
postcss Version ^8.4.23 | — | — |
css-select Version ^5.1.0 | — | — |
domhandler Version ^5.0.2 | — | — |
htmlparser2 Version ^8.0.2 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 8 years ago
- Unpacked Size
- 0.2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.