
Security News
GitHub to Block pull_request_target Workflows by Default Starting December 2
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.
@tailwindcss/oxide
Advanced tools
A native file-watching library that reports filesystem changes. It complements the kind of incremental workflow a scanner can enable, but it watches for file changes rather than extracting Tailwind class candidates.
A glob-based file discovery library. It can find files matching patterns, but does not provide Tailwind-specific candidate extraction or the same integrated native scanning behavior.
A JavaScript tool for parsing and transforming CSS with a plugin architecture. It operates on CSS, whereas Oxide's scanning functionality discovers candidate class names in source files; the two serve different stages of a styling toolchain.
A native CSS parser, transformer, and minifier. It overlaps in being a high-performance native component for CSS tooling, but focuses on processing CSS rather than scanning project sources for utility-class candidates.
FAQs
Unknown package
The npm package @tailwindcss/oxide receives a total of 76,644,123 weekly downloads. As such, @tailwindcss/oxide popularity was classified as popular.
We found that @tailwindcss/oxide demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.

Security News
/Application Security
A practical guide to securing GitHub Actions against supply chain attacks, covering malicious pull requests, credential theft, dependency risks, and release pipelines.

Security News
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.