postcss-custom-media

Use Custom Media Queries in CSS

Latest 12.0.3

78%

Total Score

healthy

Healthy, with steady releases and active source work despite concentrated contribution and weak package-to-repository identification.

Health Score Breakdown

Repo bus factor

One contributor made all 349 recent commits, leaving no demonstrated second active contributor and increasing continuity risk. Organization backing helps provide a handoff path but does not remove the present concentration.

Repo package mention

The repository name does not match the package and its README does not mention postcss-custom-media, so the package-to-repository relationship is less transparent. A name mismatch alone can be normal for a monorepo, but the lack of a README mention warrants caution.

Workflow audit

All five workflows were analyzed, all ten action references are pinned, and four workflows use read-only permissions. One workflow has top-level write permissions, a mild hygiene concern, but no untrusted checkout, script injection, or audit findings were detected.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Direct Dependencies

Dependency	Last Release	Score
@csstools/css-tokenizer Version ^4.0.2	—	—
@csstools/css-parser-algorithms Version ^4.0.2	—	—
@csstools/media-query-list-parser Version ^5.0.2	—	—
@csstools/cascade-layer-name-parser Version ^3.0.2	—	—