Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
go-webp is a tool that helps develop convert all images (.png,.jpg and .jpeg) to webp image format by just one simple command line
go-webp is a tool that helps develop convert all images (.png,.jpg and .jpeg) to webp image format by just one simple command line
instead of go to online services and upload you images and convert it to webp then change images name in files where use its
go-webp with one simple line in package.json:
Either through cloning with git or by using npm (the recommended way):
npm install -g go-webp # or using yarn: yarn global add go-webp
And go-webp will be installed globally to your system path.
You can also install go-webp as a development dependency:
npm install --save-dev go-webp # or using yarn: yarn add go-webp -D
With a local installation, go-webp will not be available in your system path or you can't use it directly from the command line. Instead, the local installation of go-webp can be run by calling it from within an npm script (such as npm start
) like the example below or using npx go-webp
.
{
"name": "...",
"version": "0.1.0",
"dependencies": {
"...":"..."
},
"scripts": {
"...": "...",
"webp": "go-webp remove=true change=true"
}
}
then you use
npm run webp # or using yarn: yarn run webp
By default go-webp change images names in files where you use its but not remove old images format (.png, .jpg, .jpeg) and
go-webp
For CLI options
remove=true
argument to remove old images format (.png, .jpg, .jpeg)go-webp remove=true
change=false
argument to not change images names in files where you use itsgo-webp change=false
remove=true change=true
to remove old images format (.png, .jpg, .jpeg) and change images names in files where you use itsgo-webp remove=true change=true
excludeFolders="public,api"
argument to exclude folders from convertiongo-webp excludeFolders="public,api"
excludeFiles="logo.png,favicon.ico,thumbnail.jpeg"
argument to exclude files from convertiongo-webp excludeFiles="logo.png,favicon.ico,thumbnail.jpeg"
{
"name": "...",
"version": "0.1.0",
"dependencies": {
"...":"..."
},
"scripts": {
"...": "...",
"webp": "go-webp remove=true change=true excludeFiles=\"logo192.png,logo512.png,favicon.ico\""
}
}
[I am very 😀 about every coffee!]
FAQs
go-webp is a tool that helps develop convert all images (.png,.jpg and .jpeg) to webp image format by just one simple command line
We found that go-webp demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.