
Security News
PodRocket Podcast: Inside the Recent npm Supply Chain Attacks
Socket CEO Feross Aboukhadijeh discusses the recent npm supply chain attacks on PodRocket, covering novel attack vectors and how developers can protect themselves.
Applies crop (+ optional hotspot) definition to an LQIP (low-quality image placeholder). Uses canvas in the browser, jimp in node.
npm install --save crop-lqip
const cropLqip = require('crop-lqip')
const lqip = 'data:image/png;base64,iVBO...'
const crop = {
top: 0.046875,
left: 0.18164,
bottom: 0.132812,
right: 0.175781
}
// Optional
const hotspot =
height: 0.6042441207142097,
width: 0.4084778420038537,
x: 0.5722543352601153,
y: 0.3194544346323949
}
cropLqip(lqip, {crop, hotspot})
.then(croppedUrl => {
someImageEl.src = croppedUrl
})
.catch(err => {
console.error(err.message)
someImageEl.src = lqip // Fall back to uncropped LQIP
})
Specify aspectRatio
in options. For instance, if the full-size, original image is 4240x2832 pixels, and you asked to get a cropped/hotspotted image at 700x380, the LQIP equivalent crop would be:
cropLqip(lqip, {
crop,
hotspot,
aspectRatio: 700 / 380
})
Normally, you'll want to scale the LQIP by setting the width/height in CSS in a browser. Should you really want to, you can still scale it within the library - just pass a scale
property:
cropLqip(lqip, {
crop,
scale: 3
})
** Note: ** This is only available in Node.js. Use cropLqip.hasSync
to check whether or not the feature is available.
const croppedUrl = cropLqip.sync(lqip, {crop})
someImageEl.src = croppedUrl
MIT © Espen Hovlandsdal
FAQs
Applies crop definition to an LQIP (low-quality image placeholder)
The npm package crop-lqip receives a total of 1 weekly downloads. As such, crop-lqip popularity was classified as not popular.
We found that crop-lqip demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Socket CEO Feross Aboukhadijeh discusses the recent npm supply chain attacks on PodRocket, covering novel attack vectors and how developers can protect themselves.
Security News
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
Product
Socket Firewall is a free tool that blocks malicious packages at install time, giving developers proactive protection against rising supply chain attacks.