postcss-color-hex-alpha
postcss-color-hex-alpha 11.0.1 appears to be a healthy, mature dependency: it has over 11 years of release history, a stable non-prerelease version, recent releases, no registry deprecation, an active non-archived organization-backed repository, and strong repository activity. Licensing, bundled typings, documentation, changelog coverage, security policy, automated security tooling, and read-only workflow permissions further support adoption. The main concerns are that all recent repository commits come from one contributor, the package lacks build provenance attestation, and the linked monorepo neither matches the package name nor mentions it in its README; these reduce transparency and resilience somewhat but do not outweigh the broader maintenance evidence.
86%
Total Score
88
100
95
100
50
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 @csstools/utilities Version ^3.0.0 | — | — |
postcss-value-parser Version ^4.2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 days ago
- Created
- 11 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.