
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
@clxrity/media-optimizer
Advanced tools
npm install -g @clxrity/media-optimizer
A package that allows you to optimize animations for your web applications.
ffmpeg
Install ffmpeg manually: https://www.ffmpeg.org/download.html
optimize install
chmod +x /path/to/script/install.sh
Note: Linux users will be prompted to enter their password
Once a file/url has been optimized, it will output an output.webm
& output.mp4
in the root directory of wherever the command is ran.
.gif
file to .webm
& .mp4
optimize path/animation.gif
optimize https://user-images.githubusercontent.com/6876788/96633009-d1818000-1318-11eb-9f1d-7f914f4ccb16.gif
Large GIFs are inefficient for delivering animated content. By converting large GIFs to videos, you can save big on users' bandwidth. Consider using MPEG4/WebM videos for animations and PNG/WebP for static images instead of GIF to save network bytes.
For more information, read the Chrome developer documentation on efficient animated content
In short, this will allow you to serve a gif(s) as a video to save a user's bandwith, and ultimately display your animation better.
<img src="my-animation.gif" />
<video autoplay loop muted playsinline>
<source src="my-animation.webm" type="video/webm" />
<source src="my-animation.mp4" type="video/mp4" />
</video>
FAQs
A media optimization package
We found that @clxrity/media-optimizer demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.