A CSS parser, transformer, and minifier written in Rust
68%
Total Score
75
88
75
50
No build attestation or trusted-publisher provenance was recorded for the release. This limits verification of how the native binary was produced, although it does not by itself indicate poor project health.
Five commits from two active maintainers in the last three months show ongoing work, though the volume is modest for a widely used project. This is a mild maintenance concern, not abandonment evidence.
The repository still receives new issues and pull requests, but only one issue was closed and no pull requests were merged in the last month. This suggests active interest with slower visible resolution.
The repository name does not match this platform-specific package and its README does not mention the package, so the package-to-source relationship is less explicit than ideal. The mismatch could reflect a monorepo subpackage, but the missing README mention remains a transparency concern.
The project uses established build tooling and has a build system, but no security-scanning tools were detected. This is a modest process gap rather than evidence of unsafe behavior.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.