
Security News
Free Certified Patch for Critical Rails Active Storage Vulnerability
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.
@flighthq/bitmap-wasm
Advanced tools
wasm-backed drop-in for @flighthq/bitmap: identical API, bulk pixel ops run in Rust
A wasm-backed drop-in for @flighthq/bitmap. The API is identical; the bulk pixel kernels run in Rust compiled to WebAssembly instead of TypeScript.
npm install @flighthq/bitmap-wasm
Swap the import and nothing else changes:
-import { convolveBitmap, getBitmapHistogram } from '@flighthq/bitmap';
+import { convolveBitmap, getBitmapHistogram } from '@flighthq/bitmap-wasm';
Call initBitmapWasm() once before the first pixel operation, or let the first call initialize lazily. Initialization is synchronous: the module is embedded as base64 in the bundle, so there is no fetch, no separate .wasm asset to host, and no await in your startup path.
import { createBitmap, createBitmapRegion } from '@flighthq/bitmap';
import { getBitmapHistogram, initBitmapWasm } from '@flighthq/bitmap-wasm';
initBitmapWasm();
const bitmap = createBitmap(256, 256, 0xff102030);
const histogram = getBitmapHistogram(createBitmapRegion(bitmap, 0, 0, 256, 256));
This package re-exports the whole of @flighthq/bitmap and shadows the subset of functions the generator has compiled to Rust. Everything else remains the upstream TypeScript implementation, so the module is always API-complete regardless of how much has been ported.
The wasm-backed functions are the ones listed under wasmFacades in tools/generator/port.config.ts, currently 34 of them: the color-matrix builders and colorMatrixBitmap; convolveBitmap, dilateBitmap, erodeBitmap, and pixelateBitmap; applyBitmapCurve, applyBitmapLevels, and applyBitmapPaletteMap; the alpha operations; the noise, Perlin, and turbulence fills plus fillBitmapRectangle; the copy and channel-merge operations; and the query functions (getBitmapHistogram, getBitmapCoverage, getBitmapColorBoundsRectangle, getBitmapMismatch, and the fingerprint pair).
Every one of them is differentially tested against the upstream TypeScript implementation, and the Rust output must match byte for byte.
@flighthq package, the published JavaScript uses extensionless relative imports, which Node's ESM resolver rejects. Use a bundler (Vite, webpack, Rollup, esbuild) or any toolchain that applies Node-style resolution to ESM. Bare node script.mjs will not resolve this package or its dependencies.@flighthq/bitmap's.@flighthq/bitmap and @flighthq/types are peer-level runtime dependencies pinned to ^0.3.0.MIT. See LICENSE.md.
FAQs
wasm-backed drop-in for @flighthq/bitmap: identical API, bulk pixel ops run in Rust
The npm package @flighthq/bitmap-wasm receives a total of 3,376 weekly downloads. As such, @flighthq/bitmap-wasm popularity was classified as popular.
We found that @flighthq/bitmap-wasm demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.

Security News
/Threat Research
A malicious Ruby gem runs a credential-stealing worm during installation, poisons AI coding tools, and can wipe files when a stolen GitHub token is revoked.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.