cssnano-preset-default
Safe defaults for cssnano which require minimal configuration.
22
Versions
MIT
License
No
Install Scripts
Attested
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation (unverified)
npm registry signatures
No source commit
Maintainers
benebludovicofischeraichriseppsteinandyjanssonevilebottnawicssnano-bot
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| provenance | publisher-changed | AI (provenance): Transition to GitHub Actions CI/CD publishing with SLSA provenance; expected for cssnano org. | ai | |
| dependencies | unvetted-dep:postcss-minify-gradients | AI (dependencies): postcss-minify-gradients is a first-party cssnano ecosystem package; stable false positive for this package. | ai | |
| bogus-package | bogus-package | AI (bogus-package): cssnano-preset-default is a legitimate monorepo package from cssnano/cssnano. High version on first registry entry reflects prior publishing history; mass-production flag reflects monorepo structure, not spam. | ai |
Versions (showing 22 of 22)
| Version | Deps | Published |
|---|---|---|
| 8.0.2 | 29 / 1 | |
| 8.0.1 | 29 / 1 | |
| 8.0.0 | 29 / 1 | |
| 7.0.17 | 30 / 1 | |
| 7.0.16 | 30 / 1 | |
| 7.0.15 | 30 / 1 | |
| 7.0.14 | 30 / 1 | |
| 7.0.13 | 30 / 1 | |
| 7.0.12 | 30 / 1 | |
| 7.0.11 | 30 / 1 | |
| 7.0.10 | 30 / 1 | |
| 7.0.9 | 30 / 1 | |
| 7.0.8 | 30 / 1 | |
| 7.0.7 | 30 / 1 | |
| 7.0.6 | 30 / 1 | |
| 7.0.5 | 30 / 1 | |
| 7.0.4 | 30 / 1 | |
| 7.0.3 | 30 / 1 | |
| 7.0.2 | 30 / 1 | |
| 7.0.1 | 30 / 1 | |
| 7.0.0 | 30 / 1 | |
| 5.2.12 | 29 / 1 |
v7.0.1
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v7.0.0
1 finding
LOW
No provenance attestation
provenance
Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.