
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
browser-data
Advanced tools
Check CSS properties support on major browsers
var bdata = require('browser-data')
var browser = {name: "Firefox", version: "3"}
console.log(bdata.getEngine(browser)) // {name: 'Gecko', version: '1.9.1'}
console.log(bdata.browserSupport(browser, "border-radius")) // false
console.log(bdata.browserSupport(browser, "border-color")) // true
Support database was built from the MDN CSS reference pages, it is the most complete and reliable source of information I've found. Mozilla is working on a project which will give access to this data with an API, no release date have been specified. In the meantime the data is gathered by scrapping the web pages, which unfortunately are not standardized and not complete (this is a collective effort, don't hesitate to contribute to the documentation on MDN Developper Network).
make supportdb
Generates db/mdnDb.json with the following structure :
{
":active":{
"n":":active",
"t":[
"CSS Pseudo-class",
"Layout"
],
"c":{
"bs":{
"c":[
{"p":"","v":"1.0"}
],
"f":[
{"p":"","v":"1.0 (1.7 or earlier)"}
]
}
}
}
}
Main Object has CSS properties as key names
Property object :
Each compatibility line is an object with browser id as keys :
Each browser object is an array of prefix / version tuples :
Support database was built from the wikipedia page https://en.wikipedia.org/w/index.php?title=Comparison_of_layout_engines_%28Cascading_Style_Sheets%29 (see tools/wikipediaScraper.js)
Browsers / engines versions matches comes from these sources :
FAQs
Check browser support for a given CSS property
The npm package browser-data receives a total of 20 weekly downloads. As such, browser-data popularity was classified as not popular.
We found that browser-data demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.