Is postcss-env-function safe to use?

postcss-env-function has no known vulnerabilities on the latest version (8.0.0). DepScope rates its health at 77/100 (moderate risk).

What is the latest version of postcss-env-function?

The latest version of postcss-env-function is 8.0.0, released 2026-01-14.

No known vulnerabilities on the latest version of postcss-env-function.

No, postcss-env-function is actively maintained. Latest release: 8.0.0 (2026-01-14).

Popular alternatives to postcss-env-function in npm include: minimatch, commander, eslint-visitor-keys, ajv, color-name.

postcss-env-function is licensed under MIT-0.

npmv8.0.0

Use env() variables in CSS

License MIT-0permissive17 versions3 maintainers1 deps4,900,694 weekly dl

/ 100

Health

safe to use

[email protected] is safe to use (health: 77/100)

Health breakdown0 – 100

15/25

maintenance

17/20

popularity

25/25

security

12/15

maturity

8/15

community

Vulnerabilities

none known

🌟

7/10typed

Types from @types/postcss-env-function (DefinitelyTyped)

Dependencies (1)

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/postcss-env-function