Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
autoprefixer-core
Advanced tools
PostCSS plugin to parse CSS and add vendor prefixes using values from Can I Use.
This is core package to build Autoprefixer plugin for some environment (like grunt‑autoprefixer). For end-user documentation, features and plugins list visit main Autoprefixer project.
Write your CSS rules without vendor prefixes (in fact, forget about them entirely):
:fullscreen a {
display: flex
}
Process your CSS by Autoprefixer:
var autoprefixer = require('autoprefixer-core');
var postcss = require('postcss');
postcss([ autoprefixer ]).process(css).then(function (result) {
result.warnings().forEach(function (warn) {
console.warn(warn.toString());
});
console.log(result.css);
});
It will use the data based on current browser popularity and property support to apply prefixes for you:
:-webkit-full-screen a {
display: -webkit-box;
display: -webkit-flex;
display: flex
}
:-moz-full-screen a {
display: flex
}
:-ms-fullscreen a {
display: -ms-flexbox;
display: flex
}
:fullscreen a {
display: -webkit-box;
display: -webkit-flex;
display: -ms-flexbox;
display: flex
}
To process your CSS you need to make 3 steps:
Function autoprefixer(options)
returns new PostCSS plugin:
var plugin = autoprefixer({ browsers: ['> 1%', 'IE 7'], cascade: false });
There are 4 options:
browsers
(array): list of browsers, which are supported in your project.
You can directly specify browser version (like iOS 7
) or use selections
(like last 2 version
or > 5%
). See Browserslist docs for available
queries and default value.cascade
(boolean): should Autoprefixer uses Visual Cascade,
if CSS is uncompressed. Default: true
add
(boolean): should Autoprefixer add prefixes. Default is true
.remove
(boolean): should Autoprefixer remove outdated prefixes.
Default is true
.Plugin object has info()
method for debug purpose.
You can use PostCSS processor to process several CSS files to increase perfomance.
See PostCSS API for plugin usage documentation. See all PostCSS Runner Guidelines for best practices.
Method process(css, opts)
from Autoprefixer processor is a PostCSS’s method.
You must set from
and to
options with file names to generates corrects
source maps and useful error messages.
Options:
from
(path): file path to origin CSS files.
to
(path): file path to future CSS file, which will
contain processed CSS with prefixes.
safe
(boolean): enables Safe Mode in PostCSS. By default false
.
map
contains options for source maps:
inline: false
to force save map to separated file, instead of inline it
to CSS in special comment by base64.prev
(string or object): map content from previous processing step
(like Sass compilation).If you set map: false
, PostCSS will remove source map.
You can read more about the source map options in PostCSS documentation.
You parse CSS only once and then process it through array of PostCSS processors.
For example, you can use gulp-postcss:
var postcss = require('gulp-postcss');
var sourcemaps = require('gulp-sourcemaps');
gulp.task('css', function () {
var processors = [
require('autoprefixer')('last 1 version'),
require('css-mqpacker'),
require('csswring')
];
return gulp.src('./src/style.css')
.pipe(sourcemaps.init())
.pipe(postcss(processors))
.pipe(sourcemaps.write('.'))
.pipe(gulp.dest('./dest'));
});
PostCSS has a special safe mode to parse broken CSS. If you set the safe: true
option to the process
method, it will parse a {
as a {}
:
autoprefixer.process('a {'); // will throw “Unclosed block”
autoprefixer.process('a {', { safe: true }); // will process as a closed block
It is useful for legacy code when using several hacks, or interactive tools with live input, like Autoprefixer demo.
You can check which browsers are selected and which properties will be prefixed:
info = autoprefixer({ browsers: ['last 1 version'] }).info();
console.log(info);
FAQs
autoprefixer-core was depreacted, use autoprefixer
The npm package autoprefixer-core receives a total of 20,363 weekly downloads. As such, autoprefixer-core popularity was classified as popular.
We found that autoprefixer-core demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.