Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
apply-cube-lut
Advanced tools
Applies a Cube LUT to an image. See parse-cube-lut for Cube LUT parsing.
LUT files are useful for color grading, encapsulating complex color-space transforms or emulating film stock for photography and video.
Photograph transformed with a Fuji 400H stock emulation LUT.
$ npm install apply-cube-lut
var applyCubeLUT = require('apply-cube-lut');
var parseCubeLUT = require('parse-cube-lut');
var ndarrayFromImage = require('ndarray-from-image');
var canvasFromNdarray = require('canvas-from-ndarray');
var ops = require('ndarray-ops');
var lutURL = 'test.cube';
var imgURL = 'test.jpg';
var req = new XMLHttpRequest();
var img = new Image();
req.onload = function() {
img.onload = function() {
// once both the image and LUT data are loaded
var lut = parseCubeLUT(req.responseText);
var arr = ndarrayFromImage(img, 'float32');
// convert RGBA components to 0.0 -> 1.0
ops.mulseq(arr, 1.0 / 255.0);
// apply LUT
applyCubeLUT(arr /* dest */, arr /* src */, lut);
// convert back to 0.0 -> 255.0
ops.mulseq(arr, 255.0);
// display transformed image
var canvas = canvasFromNdarray(arr);
document.body.appendChild(canvas);
};
img.src = imgURL;
};
req.open('GET', lutURL, true);
req.send();
FAQs
Apply a Cube (IRIDAS/Adobe) LUT to an image
The npm package apply-cube-lut receives a total of 40 weekly downloads. As such, apply-cube-lut popularity was classified as not popular.
We found that apply-cube-lut demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.