Safe defaults for cssnano which require minimal configuration.
92%
Total Score
healthy
Frequent releases, active project work, and strong publishing hygiene outweigh the repository-package naming mismatch.
The package declares 29 runtime dependencies for a preset composed of many CSS transformation plugins; that breadth is consistent with its function, though it increases transitive maintenance surface.
The repository name does not match the package and its README does not mention cssnano-preset-default, creating some uncertainty about package-to-source linkage. The organization-backed cssnano monorepo and the package's documented role partly compensate, so this is a caution rather than a severe concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
browserslist Version ^4.29.3 | — | — |
postcss-calc Version ^11.2.2 | — | — |
postcss-svgo Version ^9.0.5 | — | — |
cssnano-utils Version ^8.2.1 | — | — |
postcss-colormin Version ^9.0.7 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.