
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
postcss-safe-parser
Advanced tools
A fault-tolerant CSS parser for PostCSS, which will find & fix syntax errors, capable of parsing any input. It is useful for:
PostCSS Safe Parser is built by Evil Martians, an American design and engineering consultancy for developer tools, AI, and cybersecurity startups.
Read full docs here.
PostCSS itself is a tool for transforming CSS with JavaScript plugins. While it is not a parser, it uses different parsers like postcss-safe-parser to handle CSS. It is more of an ecosystem than a simple parser and provides a wide range of plugins for various tasks.
css-tree is a CSS parser that also allows for walking and manipulation of the parsed CSS AST (Abstract Syntax Tree). It is similar to postcss-safe-parser in that it can parse CSS, but it does not specifically focus on fault tolerance.
stylelint is a modern linter that helps you avoid errors and enforce conventions in your styles. It uses PostCSS and its parsers for parsing CSS. While not a parser itself, it is related in functionality as it needs to parse CSS to lint it.
gonzales-pe is a CSS parser with a focus on performance and a rich API for traversing and manipulating the parsed CSS. Unlike postcss-safe-parser, it does not emphasize safe parsing of erroneous CSS.
FAQs
Fault-tolerant CSS parser for PostCSS
The npm package postcss-safe-parser receives a total of 10,976,157 weekly downloads. As such, postcss-safe-parser popularity was classified as popular.
We found that postcss-safe-parser demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.