postcss-import
PostCSS plugin to import CSS files
51
Versions
MIT
License
No
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
airyanzimromainmenke
Keywords
csspostcsspostcss-pluginimportnode modulesnpm
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| semgrep | semgrep:base64-decode | AI (semgrep): Decodes CSS content from data:text/css;base64 URLs — core functionality for a CSS import plugin. Not obfuscation. | ai | |
| provenance | no-provenance | AI (provenance): Informational only; package is well-established with trusted publisher. | ai |
Versions (showing 51 of 55)
| Version | Deps | Published |
|---|---|---|
| 16.1.1 | 3 / 10 | |
| 16.1.0 | 3 / 9 | |
| 16.0.1 | 3 / 9 | |
| 16.0.0 | 3 / 9 | |
| 15.1.0 | 3 / 8 | |
| 15.0.1 | 3 / 8 | |
| 15.0.0 | 3 / 8 | |
| 14.1.0 | 3 / 8 | |
| 14.0.2 | 3 / 8 | |
| 14.0.1 | 3 / 8 | |
| 14.0.0 | 3 / 8 | |
| 13.0.0 | 3 / 9 | |
| 12.0.1 | 4 / 8 | |
| 12.0.0 | 4 / 9 | |
| 11.1.0 | 4 / 9 | |
| 11.0.0 | 4 / 9 | |
| 10.0.0 | 5 / 7 | |
| 9.1.0 | 6 / 6 | |
| 9.0.0 | 6 / 6 | |
| 8.2.0 | 7 / 5 | |
| 8.1.3 | 7 / 5 | |
| 8.1.2 | 6 / 5 | |
| 8.1.1 | 6 / 5 | |
| 8.1.0 | 5 / 5 | |
| 8.0.2 | 5 / 5 | |
| 8.0.1 | 5 / 5 | |
| 8.0.0 | 5 / 5 | |
| 7.1.3 | 5 / 3 | |
| 7.1.2 | 5 / 3 | |
| 7.1.1 | 6 / 3 | |
| 7.1.0 | 6 / 3 | |
| 7.0.0 | 6 / 3 | |
| 6.2.0 | 7 / 3 | |
| 6.1.1 | 8 / 3 | |
| 6.0.0 | 7 / 3 | |
| 5.2.2 | 6 / 4 | |
| 5.2.1 | 6 / 4 | |
| 5.2.0 | 6 / 4 | |
| 5.1.1 | 5 / 4 | |
| 5.1.0 | 5 / 4 | |
| 5.0.3 | 4 / 4 | |
| 5.0.2 | 4 / 4 | |
| 5.0.1 | 4 / 4 | |
| 5.0.0 | 4 / 4 | |
| 4.1.1 | 4 / 4 | |
| 4.1.0 | 4 / 4 | |
| 4.0.0 | 4 / 4 | |
| 3.2.0 | 4 / 4 | |
| 3.1.0 | 4 / 4 | |
| 3.0.0 | 4 / 4 | |
| 2.0.0 | 3 / 4 |