Sanitize untrusted CSS with a configuration specified by a Whitelist. 根据白名单过滤CSS
66%
Total Score
50
100
81
75
A prepublish lifecycle script runs during publishing, adding some release-process complexity, although no install-time script is reported and the repository contains the package source.
Only one account has registry publish access, creating a thin publishing base and increasing continuity risk if that maintainer becomes unavailable.
The repository is owned by an individual rather than an organization, so there is no visible organizational backing to compensate for the single-maintainer structure.
The package has existed since 2015 with 12 releases, but it has had no release in about two years. That long release gap lowers confidence in ongoing maintenance, despite its established history.
The repository recorded no commits and no active maintainers in the last three months, consistent with the long release gap and indicating weak current maintenance activity.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.