Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
bdwebimage
Advanced tools
image-loader 是一个heif解码器与字节云imageX图片服务的webSDK的组合。
用户接入,ImageX服务使用请参考 ImageX SDK
yarn run watch
生成位于dist的产出文件,自行创建测试页面进行开发。
项目主要分支为dev分支,具有最新的代码,master仅作为版本发布使用。
sdk通过npm进行发布
npm发布完成后,unpkg需要 手工发布一下 将js上传到cdn
npm run cdn
let params = {
"file_size": 4482,//图片大小 单位byte
"intended_image_size": "100*100",//业务上需要的图片大小 长 * 宽 单位px
"applied_image_size": "500*500",//实际下载到的图片大小 长 * 宽 单位px
"duration": 3456,//总耗时 请求结束时间-请求开始时间(查找缓存+排队+网络+解码总时间) 单位ms
"queue_duration": 200,//排队时间,指的是业务层发起到真正开始下载等待的时间
"download_duration": 1200,//下载总耗时 单位ms
"decode_duration": 800,//解码总耗时 单位ms
"image_type": "webp",//类型,webp或者png jpg等
'image_sdk_version': "BDWebImage_VERSION",//图片sdk版本号
"log_id": 783,//单次session_id内递增
'log_type': 'image_monitor_v2',
"log_version": 1,
'image_count': 1, //图片的imageCount上报,如果是静图会是1,如果是动图会大于1
"load_status": "success",//整体加载状态,指的是用户感知到的success或者fail
"fail_phase": "download",//download或者decode等,成功的不报此字段
"err_code": -1001,//错误码,如-1001等,成功的不报此字段
"err_desc": "xxx", //错误描述,成功的不报此字段
"http_status": 200,//http状态码,正常200
"timestamp": 1542225951494,//时间戳精确到ms
"uri": "http://p3.pstatp.com/thumb/90630003c72085f5b3b7",
"heic_sys_first": 0, //1:优先使用系统的解码器,默认:0 ver:1.0.8-alpha.2
"heic_custom_decoder": 0, //1: 解码时是用自研的解码器,默认:0 ver:1.0.8-alpha.
"is_bg": false,//是否是背景图
"reffer" : window.location.href
};
FAQs
image-loader 是一个heif解码器与字节云imageX图片服务的webSDK的组合。
We found that bdwebimage demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.