postcss - npm Package Compare versions

Comparing version 8.4.8 to 8.4.9

lib/processor.js

@@ -10,3 +10,3 @@ 'use strict'
   constructor(plugins = []) {
-    this.version = '8.4.8'
+    this.version = '8.4.9'
     this.plugins = this.normalize(plugins)
@@ -13,0 +13,0 @@ }

package.json

 {
   "name": "postcss",
-  "version": "8.4.8",
+  "version": "8.4.9",
   "description": "Tool for transforming styles with JS plugins",
@@ -56,6 +56,12 @@ "engines": {
   ],
-  "funding": {
-    "type": "opencollective",
-    "url": "https://opencollective.com/postcss/"
-  },
+  "funding": [
+    {
+      "type": "opencollective",
+      "url": "https://opencollective.com/postcss/"
+    },
+    {
+      "type": "tidelift",
+      "url": "https://tidelift.com/funding/github/npm/postcss"
+    }
+  ],
   "author": "Andrey Sitnik <[e-mail]>",
@@ -62,0 +68,0 @@ "license": "MIT",

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Improved metrics

Total package byte prevSize

186438

increased by0.06%

Worsened metrics

Number of low supply chain risk alerts

15

increased by87.5%

No dependency changes