This package exports a few of the CSS variables that we use in Facebook projects. This is not the full list we have internally but focused on making available the minimum set needed by our open source projects.
58%
Total Score
67
86
88
Only three releases exist, with the latest in December 2018 and no releases in the last 12 months. That long release gap raises maintenance and compatibility concerns for a dependency.
The repository recorded zero commits and zero active maintainers in the last three months. Together with the package's old latest release, this indicates limited currently observed maintenance.
There were no new or closed issues and no merged pull requests in the last month, despite 45 open issues and 37 open pull requests. This is a cautionary sign for responsiveness.
The linked repository name does not match the package name and its README does not mention the package. Although this can occur in a monorepo, the lack of a README reference weakens package-to-source traceability.
All workflows were analyzed with no audit findings or untrusted checkout and injection sinks. However, both action references are unpinned, leaving avoidable build reproducibility and action-update risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.