Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on Feb 9, 2024 via pnpm

postcss-loader 7.3.3

PostCSS loader for webpack
Package summary
Share
2
issues
1
high severity
license
1
1
low severity
license
1
7
licenses
88
MIT
7
BSD-2-Clause
6
ISC
8
other licenses
BSD-3-Clause
4
Apache-2.0
2
Python-2.0
1
CC-BY-4.0
1
Package created
3 Oct 2014
Version published
10 Jun 2023
Maintainers
4
Total deps
109
Direct deps
5
License
MIT

Issues

2

1 high severity issue

high
Recommendation: Read and validate the license terms
via: webpack@5.90.1
Collapse
Expand

1 low severity issue

low
Recommendation: Read and validate the license terms
via: webpack@5.90.1
Collapse
Expand

Licenses

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
88 Packages, Including:
@babel/code-frame@7.23.5
@babel/helper-validator-identifier@7.22.20
@babel/highlight@7.23.4
@jridgewell/gen-mapping@0.3.3
@jridgewell/resolve-uri@3.1.1
@jridgewell/set-array@1.1.2
@jridgewell/source-map@0.3.5
@jridgewell/sourcemap-codec@1.4.15
@jridgewell/trace-mapping@0.3.22
@types/eslint-scope@3.7.7
@types/eslint@8.56.2
@types/estree@1.0.5
@types/json-schema@7.0.15
@types/node@20.11.17
@webassemblyjs/ast@1.11.6
@webassemblyjs/floating-point-hex-parser@1.11.6
@webassemblyjs/helper-api-error@1.11.6
@webassemblyjs/helper-buffer@1.11.6
@webassemblyjs/helper-numbers@1.11.6
@webassemblyjs/helper-wasm-bytecode@1.11.6
@webassemblyjs/helper-wasm-section@1.11.6
@webassemblyjs/ieee754@1.11.6
@webassemblyjs/utf8@1.11.6
@webassemblyjs/wasm-edit@1.11.6
@webassemblyjs/wasm-gen@1.11.6
@webassemblyjs/wasm-opt@1.11.6
@webassemblyjs/wasm-parser@1.11.6
@webassemblyjs/wast-printer@1.11.6
acorn-import-assertions@1.9.0
acorn@8.11.3
ajv-keywords@3.5.2
ajv@6.12.6
ansi-styles@3.2.1
browserslist@4.22.3
buffer-from@1.1.2
callsites@3.1.0
chalk@2.4.2
chrome-trace-event@1.0.3
color-convert@1.9.3
color-name@1.1.3
commander@2.20.3
cosmiconfig@8.3.6
enhanced-resolve@5.15.0
error-ex@1.3.2
es-module-lexer@1.4.1
escalade@3.1.2
escape-string-regexp@1.0.5
events@3.3.0
fast-deep-equal@3.1.3
fast-json-stable-stringify@2.1.0

BSD 2-Clause "Simplified" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
hold-liable
Must
include-copyright
include-license
7 Packages, Including:
eslint-scope@5.1.1
esrecurse@4.3.0
estraverse@4.3.0
estraverse@5.3.0
glob-to-regexp@0.4.1
terser@5.27.0
uri-js@4.4.1

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
6 Packages, Including:
electron-to-chromium@1.4.663
graceful-fs@4.2.11
lru-cache@6.0.0
picocolors@1.0.0
semver@7.6.0
yallist@4.0.0

BSD 3-Clause "New" or "Revised" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
use-trademark
hold-liable
Must
include-copyright
include-license
4 Packages, Including:
@xtuc/ieee754@1.2.0
serialize-javascript@6.0.2
source-map-js@1.0.2
source-map@0.6.1

Apache License 2.0

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
use-patent-claims
place-warranty
Cannot
hold-liable
use-trademark
Must
include-copyright
include-license
state-changes
include-notice
2 Packages, Including:
@webassemblyjs/leb128@1.11.6
@xtuc/long@4.2.2

Python License 2.0

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
use-trademark
hold-liable
Must
include-copyright
include-license
state-changes
1 Packages, Including:
argparse@2.0.1

Creative Commons Attribution 4.0 International

Uncategorized
Not OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
Cannot
Must
1 Packages, Including:
caniuse-lite@1.0.30001585
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

5
All Dependencies CSV
β“˜ This is a list of postcss-loader 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
cosmiconfig8.3.618.95 kBMIT
prod
jiti1.21.0393.4 kBMIT
prod
postcss8.4.35193.05 kBMIT
prod peer
semver7.6.026.57 kBISC
prod
webpack5.90.1924.37 kBMIT
prod peer
1
1

Visualizations

Frequently Asked Questions

What does postcss-loader do?

PostCSS loader, postcss-loader, is a processor for CSS used within webpack. It allows you to process your CSS with PostCSS, an advanced tool for transforming CSS in JavaScript. PostCSS loader can greatly enhance your workflow by allowing you to use next-generation CSS features, as well as other capabilities such as autoprefixing, minification, and more. It should be used after css-loader and style-loader, but before any other preprocessor loaders like sass-loader or less-loader.

How do you use postcss-loader?

To start using postcss-loader, first you need to install it alongside postcss using npm, yarn, or pnpm. For example, you can install it via npm using the following command:

npm install --save-dev postcss-loader postcss

After installing postcss-loader, you should then include it in your webpack configuration file, webpack.config.js. Suppose you want to use the postcss-preset-env plugin with postcss-loader. The necessary configuration would look like the following:

module.exports = {
  module: {
    rules: [
      {
        test: /\.css$/i,
        use: [
          "style-loader",
          "css-loader",
          {
            loader: "postcss-loader",
            options: {
              postcssOptions: {
                plugins: [
                  [
                    "postcss-preset-env",
                    {
                      // Options for "postcss-preset-env"
                    },
                  ],
                ],
              },
            },
          },
        ],
      },
    ],
  },
};

Note that it is also possible to provide PostCSS options and specify plugins via a configuration file, referred to as postcss.config.js. This file is automatically searched for by the loader when included in your project.

Where are the postcss-loader docs?

The full documentation for Postcss-loader can be found on its GitHub repository at https://github.com/webpack-contrib/postcss-loader. This manual includes comprehensive details on setting up and configuring the package, as well as usage examples for a variety of scenarios.