Loading npm security reports…
Static analysis completed at 65.0% confidence. No malicious behavior was detected; 5 low-signal pattern(s) were surfaced and cleared.
Package source references a known benign dynamic code generation pattern.
css-utilities/transform.jsView on unpkg · L1A single source file combines environment access, network access, and code or shell execution; review context before blocking.
css-utilities/transform.js#virtual:base64:round1View on unpkg · L1A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
css-utilities/transform.js#virtual:normalized:round2View on unpkgPackage source references a known benign dynamic code generation pattern.
css-utilities/transform.jsView on unpkg · L1A single source file combines environment access, network access, and code or shell execution; review context before blocking.
css-utilities/transform.js#virtual:base64:round1View on unpkg · L1A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
css-utilities/transform.js#virtual:normalized:round2View on unpkg