Is postcss-env-function safe to use?

postcss-env-function has no known vulnerabilities on the latest version (8.0.0). DepScope rates its health at 77/100 (moderate risk).

What is the latest version of postcss-env-function?

The latest version of postcss-env-function is 8.0.0, released 2026-01-14.

Does postcss-env-function have known vulnerabilities?

No known vulnerabilities on the latest version of postcss-env-function.

Is postcss-env-function deprecated?

No, postcss-env-function is actively maintained. Latest release: 8.0.0 (2026-01-14).

What are alternatives to postcss-env-function?

Popular alternatives to postcss-env-function in npm include: semver, minimatch, ansi-styles, brace-expansion, strip-ansi.

What license does postcss-env-function use?

postcss-env-function is licensed under MIT-0.

postcss-env-function

npmv8.0.0

Use env() variables in CSS

License MIT-0permissive17 versions3 maintainers1 deps4,752,823 weekly dl

csstools/postcss-plugins

/ 100

Health

safe to use

[email protected] is safe to use (health: 77/100)

Health breakdown0 – 100

15/25

maintenance

17/20

popularity

25/25

security

12/15

maturity

8/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

2.7 KBminified

1.2 KB gzipped

1 direct dependencies

side effects

🌟

TypeScript

7/10typed

Types from @types/postcss-env-function (DefinitelyTyped)

Health History

Dependency Tree

License Audit

Dependencies (1)

postcss-value-parser

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/postcss-env-function