
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
A robust CSS stylesheet statistics collector and analyzer
npm install scancss --save
yarn add scancss --save
import scancss from 'scancss';
// or const scancss = require('scancss');
const stylesheet = `
.selector {
display: inline-block;
position: relative;
width: 40px;
height: 40px;
background-color: #123123;
color: #fff;
}
@media screen and (max-width: 480px) {
.selector {
width: 20px;
height: 20px;
background-color: #456456;
color: #000;
}
}
`;
// Switching off some metrics
const report = scancss(
stylesheet,
{
atRules: false,
selectorsUsage: false,
dataUris: false,
}
);
NOTE: Without provided options object scancss will use defaults. See available Options.
See Report Structure for more details.
See examples folder with stylesheets and their corresponding reports.
Use this flag to fill .size metric
trueUse this flag to fill .comments metric
trueUse this flag to fill .atRules, .mediaQueries, .keyframes, .imports metrics
NOTE: Disabling this flag you will disable counting browser hacks in @supports and @media at-rules
Default: true
Use this flag to fill .rules and .selectors metrics
NOTE: Disabling this flag you will disable counting all .selectors metrics
Default: true
Use this flag to fill .selectors metric
NOTE: Disabling this flag you will disable counting all .selectors metrics
Default: true
Use this flag to fill .selectors.usage metric
trueUse this flag to fill .selectors.attributesUsage metric
trueUse this value to set a threshold of the base parts of a selector to consider the selector as complex and to count in .selectors.complex metric
4Use this flag to fill .selectors.specificity.graphData metric
falseUse this flag to fill .declarations metric
NOTE: Disabling this flag you will disable counting all .declarations metrics
Default: true
Use this flag to fill .declarations.list metric
falseUse this flag to fill .properties metric
NOTE: Disabling this flag you will disable counting .properties.engineTriggers and .properties.performanceHacks
Default: true
Use this flag to fill .properties.engineTriggers metric
trueUse this flag to fill .properties.performanceHacks metric
trueUse this flag to fill .displays metric
trueUse this flag to fill .positions metric
trueUse this flag to fill .zIndices metric
trueUse this flag to fill .floats metric
trueUse this flag to fill .borderRadiuses metric
trueUse this flag to fill .widths metric
trueUse this flag to fill .heights metric
trueUse this flag to fill .letterSpacings metric
trueUse this flag to fill .fontSizes, .lineHeights, .fontFamilies metrics
trueUse this flag to fill .colors metric
trueUse this flag to fill .backgroundColors metric
trueUse this flag to fill .allColors metric
trueUse this flag to fill .transitions and .animations metrics
trueUse this flag to fill .functions metric
NOTE: Disabling this flag you will disable counting .gradients, .filters, .dataUris, cubic-beziers for .transitions and .animations metrics
Default: true
Use this flag to fill .filters metric
Use this flag to fill .gradients metric
trueUse this flag to fill .units metric
NOTE: Disabling this flag you will disable counting .properties.negativeMargins metric
Default: true
Use this flag to fill .variables metric
trueUse this flag to fill .dataUris metric
trueUse this flag to fill .browserHacks metric
trueMIT © Alex Orekhov @everget
FAQs
A robust CSS stylesheet statistics collector and analyzer
The npm package scancss receives a total of 28 weekly downloads. As such, scancss popularity was classified as not popular.
We found that scancss demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.