Version Details and Security Vulnerabilities

📦

postcss-custom-properties

13.3.6

Comparision Betweeen 13.3.6 and 13.3.5

Identify the differences between the current version of the package and the previous one.

Version

Dependencies

Dev Dependencies

Peer Dependencies

Distributed Files

Unpacked Size

23.69 KB

23.79 KB

Version 13.3.6 Details

postcss-custom-properties, a powerful tool for leveraging CSS Custom Properties in your stylesheets, has released version 13.3.6, building upon the solid foundation of version 13.3.5. While both versions share the core functionality of enabling Custom Properties Queries, a closer look reveals key updates in the dependency tree that developers should be aware of.

The most notable changes lie in the updated dependencies. Version 13.3.6 incorporates newer versions of @csstools/css-tokenizer (now at 2.2.4, up from 2.2.3) , @csstools/css-parser-algorithms (now at 2.6.1, up from 2.6.0), and @csstools/cascade-layer-name-parser (now at 1.0.9, up from 1.0.8). These updates likely include bug fixes, performance improvements, and potentially new features within those respective libraries. Developers who rely heavily on complex CSS structures or advanced Custom Property usage might besonders benifit from these underlying improvements.

Additionally, there's a slight difference in the unpacked size of the package, with version 13.3.6 being slightly smaller (24255 bytes compared to 24363 bytes). This could indicate optimizations in the code or a reduction in bundled assets. The release date also marks a recent update in March 2024, suggesting ongoing maintenance and active development of the plugin, making it a reliable choice for modern CSS workflows. If you prioritize stability and the latest improvements in CSS parsing and tokenization, an upgrade to 13.3.6 is recommended. For those already using 13.3.5, the update promises a smoother and more reliable experience.

Security Vulnerabilities

This site is an independent open-source project and is not affiliated with, endorsed by, or sponsored by npm, Inc. or GitHub, Inc. The name “npm” is a registered trademark of npm, Inc., used here solely to describe compatibility and reference publicly available npm package data.