OSV
RepositoryCurrent collected state Current
Observed since 20 Oct, 08:20 UTC
No superseded metadata states collected. Unchanged observations do not create new revisions.
PACKAGE EXPLORERView in registry
postcss
npmTool for transforming styles with JS plugins
Versions collected295
Direct dependencies3From release 8.5.31
Last observed20 Oct, 15:34 UTC
README
Current package documentationPostCSS
PostCSS is a tool for transforming styles with JS plugins. These plugins can lint your CSS, support variables and mixins, transpile future CSS syntax, inline images, and more.
PostCSS is used by industry leaders including Wikipedia, Twitter, Alibaba, and JetBrains. The Autoprefixer and Stylelint PostCSS plugins are some of the most popular CSS tools.
PostCSS is built by Evil Martians, an American design and engineering consultancy for developer tools, AI, and cybersecurity startups.
Docs
Read full docs here.
Downloads & popularity
0downloads
1-day window · source-reported counts19 Oct 2026
61.7M30.8M0
22 Jul19 Oct
npm · 90 observations shown. Missing days are unknown.
View observed values
| Date / source period | Value | Observed at |
|---|---|---|
| 2026-10-19 – 2026-10-19 | 0 | 2026-10-20T10:23:26.1929881Z |
| 2026-10-18 – 2026-10-18 | 36,532,782 | 2026-10-20T10:23:26.1929881Z |
| 2026-10-17 – 2026-10-17 | 35,369,406 | 2026-10-20T10:23:26.1929881Z |
| 2026-10-16 – 2026-10-16 | 58,799,995 | 2026-10-20T10:23:26.1929881Z |
| 2026-10-15 – 2026-10-15 | 0 | 2026-10-20T10:23:26.1929881Z |
| 2026-10-14 – 2026-10-14 | 0 | 2026-10-20T10:23:26.1929881Z |
| 2026-10-13 – 2026-10-13 | 0 | 2026-10-20T10:23:26.1929881Z |
| 2026-10-12 – 2026-10-12 | 57,852,373 | 2026-10-20T10:23:26.1929881Z |
| 2026-10-11 – 2026-10-11 | 35,773,426 | 2026-10-20T10:23:26.1929881Z |
| 2026-10-10 – 2026-10-10 | 35,596,822 | 2026-10-20T10:23:26.1929881Z |
| 2026-10-09 – 2026-10-09 | 57,310,384 | 2026-10-20T10:23:26.1929881Z |
| 2026-10-08 – 2026-10-08 | 61,679,202 | 2026-10-20T10:23:26.1929881Z |
| 2026-10-07 – 2026-10-07 | 59,979,593 | 2026-10-20T10:23:26.1929881Z |
| 2026-10-06 – 2026-10-06 | 0 | 2026-10-20T10:23:26.1929881Z |
| 2026-10-05 – 2026-10-05 | 57,557,966 | 2026-10-20T10:23:26.1929881Z |
| 2026-10-04 – 2026-10-04 | 33,417,931 | 2026-10-20T10:23:26.1929881Z |
| 2026-10-03 – 2026-10-03 | 33,772,684 | 2026-10-20T10:23:26.1929881Z |
| 2026-10-02 – 2026-10-02 | 53,831,614 | 2026-10-20T10:23:26.1929881Z |
| 2026-10-01 – 2026-10-01 | 61,183,302 | 2026-10-20T10:23:26.1929881Z |
| 2026-09-30 – 2026-09-30 | 59,520,115 | 2026-10-20T10:23:26.1929881Z |
| 2026-09-29 – 2026-09-29 | 59,287,251 | 2026-10-20T10:23:26.1929881Z |
| 2026-09-28 – 2026-09-28 | 58,535,698 | 2026-10-20T10:23:26.1929881Z |
| 2026-09-27 – 2026-09-27 | 31,096,902 | 2026-10-20T10:23:26.1929881Z |
| 2026-09-26 – 2026-09-26 | 30,521,531 | 2026-10-20T10:23:26.1929881Z |
| 2026-09-25 – 2026-09-25 | 50,384,773 | 2026-10-20T10:23:26.1929881Z |
| 2026-09-24 – 2026-09-24 | 55,443,159 | 2026-10-20T10:23:26.1929881Z |
| 2026-09-23 – 2026-09-23 | 55,243,889 | 2026-10-20T10:23:26.1929881Z |
| 2026-09-22 – 2026-09-22 | 52,794,688 | 2026-10-20T10:23:26.1929881Z |
| 2026-09-21 – 2026-09-21 | 54,945,824 | 2026-10-20T10:23:26.1929881Z |
| 2026-09-20 – 2026-09-20 | 40,554,754 | 2026-10-20T10:23:26.1929881Z |
| 2026-09-19 – 2026-09-19 | 34,613,593 | 2026-10-20T10:23:26.1929881Z |
| 2026-09-18 – 2026-09-18 | 47,734,476 | 2026-10-20T10:23:26.1929881Z |
| 2026-09-17 – 2026-09-17 | 50,272,045 | 2026-10-20T10:23:26.1929881Z |
| 2026-09-16 – 2026-09-16 | 51,857,990 | 2026-10-20T10:23:26.1929881Z |
| 2026-09-15 – 2026-09-15 | 0 | 2026-10-20T10:23:26.1929881Z |
| 2026-09-14 – 2026-09-14 | 52,445,216 | 2026-10-20T10:23:26.1929881Z |
| 2026-09-13 – 2026-09-13 | 28,283,515 | 2026-10-20T10:23:26.1929881Z |
| 2026-09-12 – 2026-09-12 | 27,397,364 | 2026-10-20T10:23:26.1929881Z |
| 2026-09-11 – 2026-09-11 | 46,704,758 | 2026-10-20T10:23:26.1929881Z |
| 2026-09-10 – 2026-09-10 | 51,657,124 | 2026-10-20T10:23:26.1929881Z |
| 2026-09-09 – 2026-09-09 | 52,842,699 | 2026-10-20T10:23:26.1929881Z |
| 2026-09-08 – 2026-09-08 | 0 | 2026-10-20T10:23:26.1929881Z |
| 2026-09-07 – 2026-09-07 | 0 | 2026-10-20T10:23:26.1929881Z |
| 2026-09-06 – 2026-09-06 | 28,391,073 | 2026-10-20T10:23:26.1929881Z |
| 2026-09-05 – 2026-09-05 | 28,442,374 | 2026-10-20T10:23:26.1929881Z |
| 2026-09-04 – 2026-09-04 | 45,745,791 | 2026-10-20T10:23:26.1929881Z |
| 2026-09-03 – 2026-09-03 | 0 | 2026-10-20T10:23:26.1929881Z |
| 2026-09-02 – 2026-09-02 | 51,913,852 | 2026-10-20T10:23:26.1929881Z |
| 2026-09-01 – 2026-09-01 | 50,060,190 | 2026-10-20T10:23:26.1929881Z |
| 2026-08-31 – 2026-08-31 | 44,732,440 | 2026-10-20T10:23:26.1929881Z |
| 2026-08-30 – 2026-08-30 | 24,523,802 | 2026-10-20T10:23:26.1929881Z |
| 2026-08-29 – 2026-08-29 | 24,230,740 | 2026-10-20T10:23:26.1929881Z |
| 2026-08-28 – 2026-08-28 | 42,033,985 | 2026-10-20T10:23:26.1929881Z |
| 2026-08-27 – 2026-08-27 | 47,022,796 | 2026-10-20T10:23:26.1929881Z |
| 2026-08-26 – 2026-08-26 | 47,331,300 | 2026-10-20T10:23:26.1929881Z |
| 2026-08-25 – 2026-08-25 | 48,423,702 | 2026-10-20T10:23:26.1929881Z |
| 2026-08-24 – 2026-08-24 | 46,060,112 | 2026-10-20T10:23:26.1929881Z |
| 2026-08-23 – 2026-08-23 | 25,040,312 | 2026-10-20T10:23:26.1929881Z |
| 2026-08-22 – 2026-08-22 | 25,002,027 | 2026-10-20T10:23:26.1929881Z |
| 2026-08-21 – 2026-08-21 | 42,236,050 | 2026-10-20T10:23:26.1929881Z |
| 2026-08-20 – 2026-08-20 | 46,176,803 | 2026-10-20T10:23:26.1929881Z |
| 2026-08-19 – 2026-08-19 | 46,354,472 | 2026-10-20T10:23:26.1929881Z |
| 2026-08-18 – 2026-08-18 | 47,075,197 | 2026-10-20T10:23:26.1929881Z |
| 2026-08-17 – 2026-08-17 | 42,617,299 | 2026-10-20T10:23:26.1929881Z |
| 2026-08-16 – 2026-08-16 | 24,827,858 | 2026-10-20T10:23:26.1929881Z |
| 2026-08-15 – 2026-08-15 | 25,139,560 | 2026-10-20T10:23:26.1929881Z |
| 2026-08-14 – 2026-08-14 | 0 | 2026-10-20T10:23:26.1929881Z |
| 2026-08-13 – 2026-08-13 | 46,231,885 | 2026-10-20T10:23:26.1929881Z |
| 2026-08-12 – 2026-08-12 | 46,248,698 | 2026-10-20T10:23:26.1929881Z |
| 2026-08-11 – 2026-08-11 | 46,335,323 | 2026-10-20T10:23:26.1929881Z |
| 2026-08-10 – 2026-08-10 | 45,224,620 | 2026-10-20T10:23:26.1929881Z |
| 2026-08-09 – 2026-08-09 | 24,704,483 | 2026-10-20T10:23:26.1929881Z |
| 2026-08-08 – 2026-08-08 | 24,402,023 | 2026-10-20T10:23:26.1929881Z |
| 2026-08-07 – 2026-08-07 | 42,919,807 | 2026-10-20T10:23:26.1929881Z |
| 2026-08-06 – 2026-08-06 | 40,632,768 | 2026-10-20T10:23:26.1929881Z |
| 2026-08-05 – 2026-08-05 | 46,491,519 | 2026-10-20T10:23:26.1929881Z |
| 2026-08-04 – 2026-08-04 | 47,410,154 | 2026-10-20T10:23:26.1929881Z |
| 2026-08-03 – 2026-08-03 | 45,057,936 | 2026-10-20T10:23:26.1929881Z |
| 2026-08-02 – 2026-08-02 | 24,401,141 | 2026-10-20T10:23:26.1929881Z |
| 2026-08-01 – 2026-08-01 | 25,148,540 | 2026-10-20T10:23:26.1929881Z |
| 2026-07-31 – 2026-07-31 | 40,929,627 | 2026-10-20T10:23:26.1929881Z |
| 2026-07-30 – 2026-07-30 | 45,533,237 | 2026-10-20T10:23:26.1929881Z |
| 2026-07-29 – 2026-07-29 | 45,932,980 | 2026-10-20T10:23:26.1929881Z |
| 2026-07-28 – 2026-07-28 | 46,993,866 | 2026-10-20T10:23:26.1929881Z |
| 2026-07-27 – 2026-07-27 | 44,972,893 | 2026-10-20T10:23:26.1929881Z |
| 2026-07-26 – 2026-07-26 | 23,668,122 | 2026-10-20T10:23:26.1929881Z |
| 2026-07-25 – 2026-07-25 | 23,320,960 | 2026-10-20T10:23:26.1929881Z |
| 2026-07-24 – 2026-07-24 | 40,771,154 | 2026-10-20T10:23:26.1929881Z |
| 2026-07-23 – 2026-07-23 | 44,892,088 | 2026-10-20T10:23:26.1929881Z |
| 2026-07-22 – 2026-07-22 | 46,256,111 | 2026-10-20T10:23:26.1929881Z |
Versions 295
Collected releases| Version | Published | Direct dependencies | Open version |
|---|---|---|---|
| 6.0.18 | 15 Feb 2018 | 3 | |
| 6.0.17 | 1 Feb 2018 | 3 | |
| 6.0.16 | 6 Jan 2018 | 3 | |
| 6.0.15 | 2 Jan 2018 | 3 | |
| 6.0.14 | 2 Nov 2017 | 30 | |
| 6.0.13 | 4 Oct 2017 | 30 | |
| 5.2.18 | 4 Oct 2017 | 31 | |
| 6.0.12 | 25 Sept 2017 | 30 | |
| 6.0.11 | 6 Sept 2017 | 30 | |
| 6.0.10 | 27 Aug 2017 | 30 | |
| 6.0.9 | 11 Aug 2017 | 30 | |
| 6.0.8 | 19 Jul 2017 | 30 | |
| 6.0.7 | 17 Jul 2017 | 30 | |
| 6.0.6 | 5 Jul 2017 | 30 | |
| 6.0.5 | 3 Jul 2017 | 30 | |
| 6.0.4 | 30 Jun 2017 | 29 | |
| 6.0.3 | 23 Jun 2017 | 29 | |
| 6.0.2 | 12 Jun 2017 | 29 | |
| 6.0.1 | 7 May 2017 | 29 | |
| 6.0.0 | 6 May 2017 | 29 |
Package advisories
5GHSA-r28c-9q8g-f849OSV
PostCSS: Path Traversal in Previous Source Map Auto-Loading (sourceMappingURL) leads to Arbitrary .map File Disclosure
Source recordGHSA-fxqj-rqcc-2cmpOSV
PostCSS: incomplete fix of GHSA-6g55-p6wh-862q — attacker-controlled sourceMappingURL reads arbitrary .map files when `from` is unset
Source recordGHSA-6g55-p6wh-862qOSV
PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments
Source recordGHSA-qx2v-qp2m-jg93OSV
PostCSS has XSS via Unescaped </style> in its CSS Stringify Output
Source recordMatched to the package identity. Affected version ranges have not been evaluated.
Repository
PENDINGRepository
PENDINGMetadata history
Meaningful changesRecord identity
package:f9ba2c98f586af3072b2908f3e5d9b993bb2ec18b95312e0e280dedbc45b1c8a