stylelint 16.11.0

A mighty CSS linter that helps you avoid errors and enforce conventions.

stylelint@16.11.0 was published on 2024-11-28. Its manifest declares 38 runtime dependencies and 0 peer requirements. Type declarations are bundled according to the package metadata. The declared Node.js requirement is >=18.12.0.

All stylelint versions · Permanent reference to 16.11.0 · Latest release

Package specifications

Version	16.11.0
License declaration	MIT
Published	2024-11-28T15:50:46.038Z
Node.js requirement	>=18.12.0
Type declarations	Bundled declarations
Runtime dependency count	38
Peer requirement count	0
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	1472.37 KiB
Published file count	621
Package type	Not declared
ES module entry	Not declared
Default entry	lib/index.cjs
Side effects declaration	Not declared
Direct advisories	0
Resolved graph dependencies	107
Repository stars	11538
Repository forks	1028

Install stylelint 16.11.0

npm install stylelint@16.11.0
pnpm add stylelint@16.11.0
yarn add stylelint@16.11.0

Runtime dependencies

meow ^13.2.0
debug ^4.3.7
table ^6.8.2
colord ^2.9.3
globby ^11.1.0
ignore ^6.0.2
postcss ^8.4.49
css-tree ^3.0.1
globjoin ^0.1.4
svg-tags ^1.0.0
fast-glob ^3.3.2
html-tags ^3.3.1
micromatch ^4.0.8
picocolors ^1.1.1
cosmiconfig ^9.0.0
imurmurhash ^0.1.4
resolve-from ^5.0.0
string-width ^4.2.3
balanced-match ^2.0.0
global-modules ^2.0.0
normalize-path ^3.0.0
is-plain-object ^5.0.0
file-entry-cache ^9.1.0
mathml-tag-names ^2.1.3
write-file-atomic ^5.0.1
css-functions-list ^3.2.3
fastest-levenshtein ^1.0.16
postcss-safe-parser ^7.0.1
supports-hyperlinks ^3.1.0
known-css-properties ^0.35.0
postcss-value-parser ^4.2.0
@csstools/css-tokenizer ^3.0.3
postcss-selector-parser ^7.0.0
@csstools/selector-specificity ^5.0.0
@csstools/css-parser-algorithms ^3.0.4
postcss-resolve-nested-selector ^0.1.6
@dual-bundle/import-meta-resolve ^4.1.0
@csstools/media-query-list-parser ^4.0.2

Peer requirements

None declared

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

@babel/code-frame@7.29.7 — indirect
@babel/helper-validator-identifier@7.29.7 — indirect
@csstools/css-parser-algorithms@3.0.5 — direct
@csstools/css-tokenizer@3.0.4 — direct
@csstools/media-query-list-parser@4.0.3 — direct
@csstools/selector-specificity@5.0.0 — direct
@dual-bundle/import-meta-resolve@4.2.1 — direct
@nodelib/fs.scandir@2.1.5 — indirect
@nodelib/fs.stat@2.0.5 — indirect
@nodelib/fs.walk@1.2.8 — indirect
ajv@8.20.0 — indirect
ansi-regex@5.0.1 — indirect
ansi-styles@4.3.0 — indirect
argparse@2.0.1 — indirect
array-union@2.1.0 — indirect
astral-regex@2.0.0 — indirect
balanced-match@2.0.0 — direct
braces@3.0.3 — indirect
callsites@3.1.0 — indirect
color-convert@2.0.1 — indirect
color-name@1.1.4 — indirect
colord@2.10.0 — direct
cosmiconfig@9.0.2 — direct
css-functions-list@3.3.3 — direct
css-tree@3.2.1 — direct
cssesc@3.0.0 — indirect
debug@4.4.3 — direct
dir-glob@3.0.1 — indirect
emoji-regex@8.0.0 — indirect
env-paths@2.2.1 — indirect
error-ex@1.3.4 — indirect
fast-deep-equal@3.1.3 — indirect
fast-glob@3.3.3 — direct
fast-uri@3.1.9 — indirect
fastest-levenshtein@1.0.16 — direct
fastq@1.20.3 — indirect
file-entry-cache@9.1.0 — direct
fill-range@7.1.1 — indirect
flat-cache@5.0.0 — indirect
flatted@3.4.4 — indirect
glob-parent@5.1.2 — indirect
global-modules@2.0.0 — direct
global-prefix@3.0.0 — indirect
globby@11.1.0 — direct
globjoin@0.1.4 — direct
has-flag@4.0.0 — indirect
html-tags@3.3.1 — direct
ignore@5.3.2 — indirect
ignore@6.0.2 — direct
import-fresh@3.3.1 — indirect
imurmurhash@0.1.4 — direct
ini@1.3.8 — indirect
is-arrayish@0.2.1 — indirect
is-extglob@2.1.1 — indirect
is-fullwidth-code-point@3.0.0 — indirect
is-glob@4.0.3 — indirect
is-number@7.0.0 — indirect
is-plain-object@5.1.0 — direct
isexe@2.0.0 — indirect
js-tokens@4.0.0 — indirect
js-yaml@4.3.2 — indirect
json-buffer@3.0.1 — indirect
json-parse-even-better-errors@2.3.1 — indirect
json-schema-traverse@1.0.0 — indirect
keyv@4.5.4 — indirect
kind-of@6.0.3 — indirect
known-css-properties@0.35.0 — direct
lines-and-columns@1.2.4 — indirect
lodash.truncate@4.4.2 — indirect
mathml-tag-names@2.1.3 — direct
mdn-data@2.27.1 — indirect
meow@13.2.0 — direct
merge2@1.4.1 — indirect
micromatch@4.0.8 — direct
ms@2.1.3 — indirect
nanoid@3.3.20 — indirect
normalize-path@3.0.0 — direct
parent-module@1.0.1 — indirect
parse-json@5.2.0 — indirect
path-type@4.0.0 — indirect
picocolors@1.1.1 — direct
picomatch@2.3.2 — indirect
postcss@8.5.32 — direct
postcss-resolve-nested-selector@0.1.7 — direct
postcss-safe-parser@7.1.0 — direct
postcss-selector-parser@7.1.7 — direct
postcss-value-parser@4.2.0 — direct
queue-microtask@1.2.3 — indirect
require-from-string@2.0.2 — indirect
resolve-from@4.0.0 — indirect
resolve-from@5.0.0 — direct
reusify@1.1.0 — indirect
run-parallel@1.2.0 — indirect
signal-exit@4.1.0 — indirect
slash@3.0.0 — indirect
slice-ansi@4.0.0 — indirect
source-map-js@1.2.2 — indirect
string-width@4.2.3 — direct
strip-ansi@6.0.1 — indirect
supports-color@7.2.0 — indirect
supports-hyperlinks@3.2.0 — direct
svg-tags@1.0.0 — direct
table@6.9.0 — direct
to-regex-range@5.0.1 — indirect
util-deprecate@1.0.2 — indirect
which@1.3.1 — indirect
write-file-atomic@5.0.1 — direct

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Code-Review	10/10 — all changesets reviewed
Maintained	10/10 — 30 commit(s) and 24 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
Token-Permissions	8/10 — detected GitHub workflow tokens with excessive permissions
Binary-Artifacts	10/10 — no binaries found in the repo
Pinned-Dependencies	7/10 — dependency not pinned by hash detected -- score normalized to 7
CII-Best-Practices	2/10 — badge detected: InProgress
Fuzzing	0/10 — project is not fuzzed
License	10/10 — license file detected
Security-Policy	4/10 — security policy file detected
Branch-Protection	4/10 — branch protection is not maximal on development and all release branches
SAST	10/10 — SAST tool is run on all commits

Evidence and freshness

https://registry.npmjs.org/stylelint/16.11.0 — retrieved 2026-10-29T10:08:05.183Z
https://api.deps.dev/v3/projects/github.com%2Fstylelint%2Fstylelint — retrieved 2026-10-29T06:45:19.025Z
https://api.deps.dev/v3/systems/npm/packages/stylelint/versions/16.11.0 — retrieved 2026-10-29T10:08:05.700Z
https://api.deps.dev/v3/systems/npm/packages/stylelint/versions/16.11.0:dependencies — retrieved 2026-10-29T10:08:05.724Z