A Sass parser for PostCSS, using gonzales-pe.
56%
Total Score
50
86
50
The release has no build attestation or trusted-publisher provenance, leaving publication origin less verifiable than releases with modern registry provenance.
The last release was in May 2021, with no releases during the most recent 12 months, indicating a long period without published maintenance.
The repository recorded zero commits and zero active maintainers during the most recent 3 months, which supports the concern that maintenance has slowed substantially.
There were no new or closed issues or pull requests during the most recent month, while 11 issues and 9 pull requests remain open, suggesting limited issue management.
The repository reports no build tooling and no security-scanning tools. This is a hygiene gap rather than evidence that the package is unsafe, but it reduces maintenance transparency.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
postcss Version ^8.2.14 | — | — |
gonzales-pe Version ^4.3.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.