
Security News
OWASP 2025 Top 10 Adds Software Supply Chain Failures, Ranked Top Community Concern
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.
Client-side (browser-side, using Javascript) conversion of HEIC/HEIF image files to JPEG, PNG, or GIF.
High Efficiency Image File Format (HEIC) is a new image container format from the developers of MPEG, a popular audio and video compression standard. HEIC will be used by default on new photos on iOS 11, and it’s designed to save you storage space. As it’s a new container format, there will be some incompatibilities along the way, and Apple does a good job at handling most of these. iOS 11 will automatically share HEIC files as the default JPEG format for apps, so you won’t notice anything when you share a photo on Twitter or Instagram. iOS 11 also offers to automatically transfer photos and videos in a compatible format for Mac or PC users, useful if you’re simply plugging your iPhone into your laptop or PC. theverge.com
While developing some web-based application that should be able to handle mobile uploads, I've come across a problem where browsers can not display certain images uploaded from the iPhone, after investigating through the issue, I noticed that that my iPhone was giving a heic formatted image.
Currently there are zero web browsers that support HEIC photos. Even Apple's latest-greatest version of Safari can't decode HEIC and doesn't recognize the "image/heic" mimetype. A solution that came across my mind is to utilize the benefits of high resolution and low storage of heic images when storing in the server and client-side conversion to JPEG for viewing on the browser.
This library would typically be used for viewing purposes, as currently it's not focusing on copying any metadata from the original heic file to the output jpeg, gif or png. The development process of this library is focusing on viewing a browser-consumable version of an heic file, and doing it quickly, asynchronously (using web workers) and accurately. This library would even convert heic containers that have multiple heic images into an animated gif.
However, if you're planning on storing the files (not just viewing them), I'd suggest you look for a server-side tool, or you try to get your hands dirty and contribute to this library and make it capable of storing metadata.
Last but not least, this tool is specifically for the browser environment, it will not work in node environment.
Those are the known issues of the library, pull requests are welcome:
gif, however when a heic animation is given (like the stars animation in the demo) library will only take the first shot of the animation.Sharp is a high-performance image processing library for Node.js. It supports a wide range of image formats, including HEIC, and provides functionalities for resizing, cropping, and converting images. Compared to heic2any, Sharp offers more advanced image processing capabilities but may be more complex to use for simple HEIC to JPEG/PNG/GIF conversions.
Imagemin is an image optimization library for Node.js that supports various image formats, including HEIC. It focuses on minimizing image file sizes while maintaining quality. While it can convert HEIC images, its primary use case is image optimization rather than format conversion, making it different from heic2any.
Jimp is a JavaScript image processing library that supports various image formats, including HEIC. It provides functionalities for image manipulation, such as resizing, cropping, and converting images. Jimp is similar to heic2any in terms of format conversion but offers additional image manipulation features.
FAQs
Converting HEIC/HEIF to PNG/JPEG/GIF in the browser
The npm package heic2any receives a total of 232,349 weekly downloads. As such, heic2any popularity was classified as popular.
We found that heic2any demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.