css-loader
css loader module for webpack
15%
Total Score
83
86
75
50
Health Score Breakdown
The linked repository is archived, which is a severe maintenance and abandonment risk even though it was pushed on August 28, 2026.
No build attestation or trusted-publisher provenance was reported, leaving release origin less verifiable than it could be; this is secondary to the repository status.
Only three commits from one active maintainer were recorded in the last three months, indicating narrow recent maintenance capacity despite the recent release.
Both workflows use read-only permissions and the audit completed fully with no untrusted checkout or script-injection findings. The one high-confidence adhoc-packages finding is a low-severity hygiene concern, not the main adoption blocker.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 semver Version ^7.6.3 | — | — |
postcss Version ^8.4.40 | — | — |
icss-utils Version ^5.1.0 | — | — |
postcss-value-parser Version ^4.2.0 | — | — |
postcss-modules-scope Version ^3.2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 1 month ago
- Created
- 14 years ago
- Unpacked Size
- 0.2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.