“Minify colors in your CSS files with PostCSS.”
Local reference
Suspicious dependency
Inferred
Mal-ecule
K(Li)Md(Pa₂)
Referenced by 10 samples
- benign github.com-wuba-taro-playground-v1.10.0-beta.0.zip fetched
- benign zl-speceq-0.0.2-3.src.tar.gz fetched
- benign github.com-hyperloop-upv-software-v0.0.0-20260618094256-2fab3ac96f2d.zip fetched
- benign github.com-dequelabs-cauldron-v5.1.0+incompatible.zip fetched
- benign js-crop-3.5.0.zip fetched
- benign github.com-dkotik-htadaptor-v0.0.0-20260809061511-0afb87d8d106.zip fetched
- hostile github.com-googlecloudplatform-scion-v0.0.0-20260804205026-91a9baba77ec.zip fetched
- benign github.com-feast-dev-feast-v0.0.0-20260703030733-f296d4ba14c5.zip fetched
- benign zl-splitter-0.3.0-4.src.tar.gz fetched
- benign github.com-contactless-homeui-v2.216.4+incompatible.zip fetched
Well-known
notable severity, 99% confident.
lib/core
Declares colord npm dependency
Objectives
component severity, 80% confident.
supply-chain/install-hook/package
Repository uses GitHub shorthand format
Micro-behaviors
component severity, 95% confident.
communications/url
Encoded URL references MDN documentation
Metadata
notable severity, 90% confident.
package/manifest
Package declares TypeScript types entry
baseline severity, 80% confident.
file/profile
Contains common English function words
baseline severity, 99% confident.
lang
TypeScript declaration file
baseline severity, 100% confident.
package
package.json defines a package version
baseline severity, 100% confident.
package/quality
package.json defines a package name
component severity, 90% confident.
file
File has 30 or more lines
component severity, 100% confident.
file/extension
JavaScript source filename extension
component severity, 85% confident.
package/testing/presence
File is a test or type-declaration source file
Identity
| SHA-256 | 61eb56e671ab90ad7c1722d57a7cd64c911f65688402bbbcda9300287cdf3952 |
|---|---|
| Filename | [email protected] |
| Package | postcss-colormin |
| Version | 5.3.1 |
| PURL | pkg:npm/[email protected] |
Origin
| Source | x |
|---|---|
| Feed | pkg.go.dev |
| Ecosystem | javascript |
| Domain | npmjs.org |
| URL | https://registry.npmjs.org/postcss-colormin/-/postcss-colormin-5.3.1.tgz |
Timeline
| First seen | 10 Aug 2026 16:32 UTC |
|---|---|
| First analyzed | 10 Aug 2026 16:33 UTC |
| Last analyzed | 15 Aug 2026 21:54 UTC |
| Last updated | 15 Aug 2026 21:53 UTC |
Labeling
| Label | unknown |
|---|---|
| Traits version | 73866 |
Not seeing what you expected? Let us know