
Security News
Security Community Slams MIT-linked Report Claiming AI Powers 80% of Ransomware
Experts push back on new claims about AI-driven ransomware, warning that hype and sponsored research are distorting how the threat is understood.
postcss-purgecss
Advanced tools
PostCSS plugin for PurgeCSS.
npm i -D @fullhuman/postcss-purgecss postcss
const purgecss = require('@fullhuman/postcss-purgecss')
postcss([
  purgecss({
    content: ['./src/**/*.html']
  })
])
See PostCSS docs for examples for your environment.
All of the options of purgecss are available to use with the plugins. You will find below the main options available. For the complete list, go to the purgecss documentation website.
content (required or use contentFunction instead)Type: Array<string>
You can specify content that should be analyzed by Purgecss with an array of filenames or globs. The files can be HTML, Pug, Blade, etc.
contentFunction (as alternative to content)Type: (sourceInputFile: string) => Array<string>
The function receives the current source input file. With this you may provide a specific array of globs for each input. E.g. for an angular application only scan the components template counterpart for every component scss file:
purgecss({
  contentFunction: (sourceInputFileName: string) => {
    if (/component\.scss$/.test(sourceInputFileName))
      return [sourceInputFileName.replace(/scss$/, 'html')]
    else
      return ['./src/**/*.html']
  },
})
extractorsType: Array<Object>
Purgecss can be adapted to suit your needs. If you notice a lot of unused CSS is not being removed, you might want to use a custom extractor. More information about extractors here.
safelistYou can indicate which selectors are safe to leave in the final CSS. This can be accomplished with the option safelist.
Two forms are available for this option.
safelist: ['random', 'yep', 'button', /^nav-/]
In this form, safelist is an array that can take a string or a regex.
The complex form is:
safelist: {
    standard: ['random', 'yep', 'button', /^nav-/],
    deep: [],
    greedy: [],
    keyframes: [],
    variables: []
}
blocklistBlocklist will block the CSS selectors from appearing in the final output CSS. The selectors will be removed even when they are seen as used by PurgeCSS.
blocklist: ['usedClass', /^nav-/]
Even if nav-links and usedClass are found by an extractor, they will be removed.
skippedContentGlobsIf you provide globs for the content parameter, you can use this option to exclude certain files or folders that would otherwise be scanned. Pass an array of globs matching items that should be excluded. (Note: this option has no effect if content is not globs.)
skippedContentGlobs: ['node_modules/**', 'components/**']
Here, PurgeCSS will not scan anything in the "node_modules" and "components" folders.
rejectedType: boolean
Default value: false
If true, purged selectors will be captured and rendered as PostCSS messages.
Use with a PostCSS reporter plugin like postcss-reporter
to print the purged selectors to the console as they are processed.
keyframesType: boolean
Default value: false
If you are using a CSS animation library such as animate.css, you can remove unused keyframes by setting the keyframes option to true.
fontFaceType: boolean
Default value: false
If there are any unused @font-face rules in your css, you can remove them by setting the fontFace option to true.
Please read CONTRIBUTING.md for details on our code of conduct, and the process for submitting pull requests to us.
postcss-purgecss use SemVer for versioning.
This project is licensed under the MIT License - see the LICENSE file for details.
5.0.0 (2022-09-13)
FAQs
PostCSS plugin for PurgeCSS
We found that postcss-purgecss demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Experts push back on new claims about AI-driven ransomware, warning that hype and sponsored research are distorting how the threat is understood.

Security News
Ruby's creator Matz assumes control of RubyGems and Bundler repositories while former maintainers agree to step back and transfer all rights to end the dispute.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.