
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
@csstools/normalize.css
Advanced tools
@csstools/normalize.css is a CSS library that provides consistent, cross-browser default styling of HTML elements.
<link href="https://unpkg.com/@csstools/normalize.css" rel="stylesheet" />
Or to exclusively support evergreen browsers.
<link href="https://unpkg.com/@csstools/normalize.css/evergreen.css" rel="stylesheet" />
npm install @csstools/normalize.css --save
Import @csstools/normalize.css in CSS:
@import '~@csstools/normalize.css';
Alternatively, import @csstools/normalize.css in JS:
import '@csstools/normalize.css';
In webpack.config.js, use the appropriate loaders:
module.exports = {
module: {
rules: [
{
test: /\.css$/,
use: [ 'style-loader', 'css-loader' ]
}
]
}
}
Download
See https://csstools.github.io/normalize.css/latest/normalize.css
Please read the contribution guidelines in order to make the contribution process easy and effective for everyone involved.
necolas/normalize.cssNicolas Gallagher and I started writing normalize.css together. I named and created the normalize.css repository with the help of Paul Irish and Ben Alman. I transferred the repository to Necolas, who turned it into a “household” CSS library.
Later, I resumed authorship of normalize.css with Luciano Battagliero. Together, we tagged, deprecated, and removed “opinionated” styles — styles developers often prefer but which do not fix bugs or “normalize” browser differences.
Later, Necolas resumed authorship and the issue of whether to include or omit the opinionated styles forced us to split.
I continue working on the normalize.css project, currently under the “csstools” tag. I hope one day our differences are resolved and the projects are one again.
normalize.css is a project by Jonathan Neal, co-created with Nicolas Gallagher.
sanitize.css is another CSS library that normalizes styles across browsers. It takes a slightly different approach by also setting default styles for a range of elements, aiming to reduce the need for CSS resets.
reset-css is a package that provides a simple CSS reset to reduce browser inconsistencies in things like default line heights, margins, and font sizes of headings. It is more of a traditional reset compared to the normalization approach of @csstools/normalize.css.
modern-normalize is a smaller, more opinionated alternative to @csstools/normalize.css. It targets modern browsers only and provides normalization of styles with less overhead.
FAQs
A cross-browser CSS foundation
The npm package @csstools/normalize.css receives a total of 1,665,921 weekly downloads. As such, @csstools/normalize.css popularity was classified as popular.
We found that @csstools/normalize.css demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.