← Home

@csstools/postcss-cascade-layers

Use cascade layers in CSS

23
Versions
MIT-0
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

jonathantnealalagunaromainmenke

Keywords

cascadecsslayerspostcsspostcss-pluginselectorsspecificity

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
provenance publisher-changed AI (provenance): romainmenke is a listed contributor in package.json and a well-established csstools maintainer with 972 approved packages. The transition from alaguna is a documented legitimate handoff within the csstools org. ai
maintainer-change maintainer-added AI (maintainer-change): romainmenke is a core csstools contributor already listed in package.json; this is a legitimate maintainer addition, not a takeover. ai
license uncommon-license:MIT-0 AI (license): MIT-0 is a valid permissive license (MIT without attribution requirement) used consistently across the csstools org. Not a risk. ai
phantom-deps phantom-dep:postcss-selector-parser AI (phantom-deps): postcss-selector-parser is a well-known PostCSS ecosystem dep; phantom classification is a false positive for this plugin type. ai
phantom-deps phantom-dep:@csstools/selector-specificity AI (phantom-deps): Same-org dependency from csstools; phantom classification is a false positive for this monorepo-based plugin. ai

Versions (showing 23 of 23)

Version Deps Published
6.0.0 2 / 0
5.0.2 2 / 0
5.0.1 2 / 0
5.0.0 2 / 0
4.0.6 2 / 0
4.0.5 2 / 0
4.0.4 2 / 0
4.0.3 2 / 0
4.0.2 2 / 0
4.0.1 2 / 3
4.0.0 2 / 3
3.0.1 2 / 2
3.0.0 2 / 2
2.0.0 2 / 2
1.1.1 2 / 2
1.1.0 2 / 2
1.0.6 2 / 2
1.0.5 2 / 2
1.0.4 2 / 2
1.0.3 2 / 1
1.0.2 2 / 1
1.0.1 2 / 1
1.0.0 2 / 1