postcss-merge-longhand
postcss-merge-longhand 9.0.3 appears to be a healthy dependency: it has a long release history, frequent recent releases, stable versioning, active development in a non-archived organization-owned repository, reproducible npm provenance, tests and a changelog in the repository, and strong CI and security hygiene. The main caution is that recent commit activity is highly concentrated in one contributor and the repository does not explicitly mention this package in its README, although the organization backing and monorepo structure partly mitigate those concerns. The package is licensed, typed, free of install-time lifecycle scripts, and not deprecated.
89%
Total Score
90
100
95
100
100
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 stylehacks Version ^9.0.3 | — | — |
postcss-value-parser Version ^4.2.0 | — | — |
Weekly Downloads
Info
- Last Published
- 11 days ago
- Created
- 11 years ago
- Unpacked Size
- 0.2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.