Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on May 22, 2024 via pnpm

postcss-loader 7.2.4

PostCSS loader for webpack
Package summary
Share
2
issues
1
high severity
license
1
1
low severity
license
1
7
licenses
101
MIT
7
BSD-2-Clause
5
BSD-3-Clause
10
other licenses
ISC
5
Apache-2.0
3
Python-2.0
1
CC-BY-4.0
1
Package created
3 Oct 2014
Version published
4 Apr 2023
Maintainers
4
Total deps
123
Direct deps
8
License
MIT

Issues

2

1 high severity issue

high
Recommendation: Read and validate the license terms
via: webpack@5.91.0
Collapse
Expand

1 low severity issue

low
Recommendation: Read and validate the license terms
via: webpack@5.91.0
Collapse
Expand

Licenses

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
101 Packages, Including:
@babel/code-frame@7.24.2
@babel/helper-validator-identifier@7.24.5
@babel/highlight@7.24.5
@cspotcode/source-map-support@0.8.1
@jridgewell/gen-mapping@0.3.5
@jridgewell/resolve-uri@3.1.2
@jridgewell/set-array@1.2.1
@jridgewell/source-map@0.3.6
@jridgewell/sourcemap-codec@1.4.15
@jridgewell/trace-mapping@0.3.25
@jridgewell/trace-mapping@0.3.9
@tsconfig/node10@1.0.11
@tsconfig/node12@1.0.11
@tsconfig/node14@1.0.3
@tsconfig/node16@1.0.4
@types/eslint-scope@3.7.7
@types/eslint@8.56.10
@types/estree@1.0.5
@types/json-schema@7.0.15
@types/node@20.12.12
@webassemblyjs/ast@1.12.1
@webassemblyjs/floating-point-hex-parser@1.11.6
@webassemblyjs/helper-api-error@1.11.6
@webassemblyjs/helper-buffer@1.12.1
@webassemblyjs/helper-numbers@1.11.6
@webassemblyjs/helper-wasm-bytecode@1.11.6
@webassemblyjs/helper-wasm-section@1.12.1
@webassemblyjs/ieee754@1.11.6
@webassemblyjs/utf8@1.11.6
@webassemblyjs/wasm-edit@1.12.1
@webassemblyjs/wasm-gen@1.12.1
@webassemblyjs/wasm-opt@1.12.1
@webassemblyjs/wasm-parser@1.12.1
@webassemblyjs/wast-printer@1.12.1
acorn-import-assertions@1.9.0
acorn-walk@8.3.2
acorn@8.11.3
ajv-keywords@3.5.2
ajv@6.12.6
ansi-styles@3.2.1
arg@4.1.3
browserslist@4.23.0
buffer-from@1.1.2
callsites@3.1.0
chalk@2.4.2
chrome-trace-event@1.0.3
color-convert@1.9.3
color-name@1.1.3
commander@2.20.3
cosmiconfig-typescript-loader@4.4.0

BSD 2-Clause "Simplified" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
hold-liable
Must
include-copyright
include-license
7 Packages, Including:
eslint-scope@5.1.1
esrecurse@4.3.0
estraverse@4.3.0
estraverse@5.3.0
glob-to-regexp@0.4.1
terser@5.31.0
uri-js@4.4.1

BSD 3-Clause "New" or "Revised" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
use-trademark
hold-liable
Must
include-copyright
include-license
5 Packages, Including:
@xtuc/ieee754@1.2.0
diff@4.0.2
serialize-javascript@6.0.2
source-map-js@1.2.0
source-map@0.6.1

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
5 Packages, Including:
electron-to-chromium@1.4.777
graceful-fs@4.2.11
make-error@1.3.6
picocolors@1.0.1
semver@7.6.2

Apache License 2.0

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
use-patent-claims
place-warranty
Cannot
hold-liable
use-trademark
Must
include-copyright
include-license
state-changes
include-notice
3 Packages, Including:
@webassemblyjs/leb128@1.11.6
@xtuc/long@4.2.2
typescript@5.4.5

Python License 2.0

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
use-trademark
hold-liable
Must
include-copyright
include-license
state-changes
1 Packages, Including:
argparse@2.0.1

Creative Commons Attribution 4.0 International

Uncategorized
Not OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
Cannot
Must
1 Packages, Including:
caniuse-lite@1.0.30001620
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

8
All Dependencies CSV
β“˜ This is a list of postcss-loader 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
cosmiconfig-typescript-loader4.4.03.42 kBMIT
prod
cosmiconfig8.3.618.95 kBMIT
prod peer
klona2.0.65.86 kBMIT
prod
postcss8.4.38193.21 kBMIT
prod peer
semver7.6.293.19 kBISC
prod
ts-node10.9.2192.13 kBMIT
prod peer
typescript5.4.530.87 MBApache-2.0
prod peer
webpack5.91.04.71 MBMIT
prod peer
1
1

Visualizations

Frequently Asked Questions

What does postcss-loader do?

PostCSS loader, postcss-loader, is a processor for CSS used within webpack. It allows you to process your CSS with PostCSS, an advanced tool for transforming CSS in JavaScript. PostCSS loader can greatly enhance your workflow by allowing you to use next-generation CSS features, as well as other capabilities such as autoprefixing, minification, and more. It should be used after css-loader and style-loader, but before any other preprocessor loaders like sass-loader or less-loader.

How do you use postcss-loader?

To start using postcss-loader, first you need to install it alongside postcss using npm, yarn, or pnpm. For example, you can install it via npm using the following command:

npm install --save-dev postcss-loader postcss

After installing postcss-loader, you should then include it in your webpack configuration file, webpack.config.js. Suppose you want to use the postcss-preset-env plugin with postcss-loader. The necessary configuration would look like the following:

module.exports = {
  module: {
    rules: [
      {
        test: /\.css$/i,
        use: [
          "style-loader",
          "css-loader",
          {
            loader: "postcss-loader",
            options: {
              postcssOptions: {
                plugins: [
                  [
                    "postcss-preset-env",
                    {
                      // Options for "postcss-preset-env"
                    },
                  ],
                ],
              },
            },
          },
        ],
      },
    ],
  },
};

Note that it is also possible to provide PostCSS options and specify plugins via a configuration file, referred to as postcss.config.js. This file is automatically searched for by the loader when included in your project.

Where are the postcss-loader docs?

The full documentation for Postcss-loader can be found on its GitHub repository at https://github.com/webpack-contrib/postcss-loader. This manual includes comprehensive details on setting up and configuring the package, as well as usage examples for a variety of scenarios.