
Security News
OWASP 2025 Top 10 Adds Software Supply Chain Failures, Ranked Top Community Concern
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.
Original photo by Quinn Dombrowski. Sorry.
Cops is an image manipulation tool belt for Node.js using a Cairo-backed Canvas implementation. The goal is to make common image operations such as resizing, compositing, cropping, and creating text overlays as simple and friendly as possible.
A note on performance: I've made every attempt to keep I/O buffered and asynchronous whenever possible, but because node-canvas currently provides no good way to create an Image from a Buffer, reading images blocks the thread. You will probably experience hiccups when loading large images.
Install cops with npm:
$ npm install cops
The cops module exposes both classes and asynchronous
helpers for specific tasks. Check out the examples below, or refer to the API documentation for more info.
var cops = require("cops"),
shrink = cops.resize("50%");
cops.read("big.png", function(error, canvas) {
shrink(canvas, function(error, canvas) {
cops.write("small.png", canvas, function(error) {
// we're done here
});
});
});
Cops operations are designed to work with async.waterfall, each producing a Canvas instance for the next operation:
var cops = require("cops"),
async = require("async");
async.waterfall([
cops.read("big.png"),
cops.resize({width: 200, height: 200}),
cops.write("small.png")
], function(error, canvas) {
// mic drop
});
The cops CLI gives you some nice, node-y tools:
# resize images
$ cops resize big.jpg 50% small.jpg
$ cat big.jpg | cops resize - 50% > small.jpg
# compose images
$ cops compose --gravity southeast photo.jpg watermark.png
Run cops --help for more information.
FAQs
Composable image operations using node-canvas
The npm package cops receives a total of 6 weekly downloads. As such, cops popularity was classified as not popular.
We found that cops demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.