
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
cavif bin-wrapper that makes it seamlessly available as a local dependency
I hope that this package will be part of the imagemin plugins as an imagemin-avif
WIP
AVIF offers significant compression gains vs. JPEG and WebP, with a recent Netflix study showing 50% savings vs. standard JPEG and > 60% savings on 4:4:4 content
cavif-bin use cavif v0.6.6 with BSD 3-Clause License and Copyright (c) 2020, Kornel, as a AVIF coder.
| Option | Description |
|---|---|
| --quality=n | Quality from 1 (worst) to 100 (best), the default value is 80. The numbers have different meaning than JPEG's quality scale. Beware when comparing codecs. |
| --speed=n | Encoding speed between 1 (best, but slowest) and 10 (fastest, but a blurry mess), the default value is 1. Encoding of AVIF is pretty slow, so you need either a) beefy multicore machine b) avoid large images c) patience. |
| --overwrite | Replace files if there's .avif already. By default existing files are left untouched. |
| -o path | Write output to this path instead of samefile.avif. If multiple input files are specified, it's interpreted as a directory. |
| --quiet | Don't print anything during conversion. |
| --premultiplied-alpha | Warning: currently incompatible with libavif. Improves compression of transparent images by clearing RGB of fully transparent pixels and lowering quality of semi-transparent colors. |
| --dirty-alpha | Don't change RGB values of transparent pixels. By default irrelevant color of transparent pixels is cleared to avoid wasting space. |
| --color=rgb | encode using RGB color space instead of YCbCr color space. Makes color closer to lossless, but makes files larger. |
npm install cavif-bin
const {execFile} = require('child_process');
const cavif = require('cavif-bin');
execFile(cavif, ['input.png','--quality=74', '-o', 'output.avif'], err => {
if (err) throw err;
console.log('Image is converted!');
});
You can install cavif globally.
npm install --global cavif-bin
And use it as a CLI command.
cavif --help
media.av1.enabled activated)media.av1.enabled and media.av1.use-dav1d activated)AV1 Video Extension installed)MIT © nucliweb
FAQs
cavif bin-wrapper that makes it seamlessly available as a local dependency
We found that cavif-bin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.