images - npm Package Compare versions

Comparing version 3.0.0 to 3.0.1

index.js

@@ -32,3 +32,3 @@ /*
     path = require("path"),
-    _images = require("./binding.js"),
+    _images = require("./scripts/util/binding.js")(),
     _Image = _images.Image,
@@ -181,2 +181,3 @@ slice = Array.prototype.slice,
 images.TYPE_RAW = _images.TYPE_RAW;
+images.TYPE_WEBP = _images.TYPE_WEBP;
 
@@ -189,3 +190,4 @@ FILE_TYPE_MAP = {
     ".bmp": images.TYPE_BMP,
-    ".raw": images.TYPE_RAW
+    ".raw": images.TYPE_RAW,
+    ".webp": images.TYPE_WEBP
 };
@@ -192,0 +194,0 @@

package.json

 {
   "name": "images",
-  "version": "3.0.0",
-  "description": "Cross-platform image decoder(png/jpeg/gif) and encoder(png/jpeg) for Node.js",
+  "version": "3.0.1",
+  "description": "Cross-platform image decoder(webp/png/jpeg/gif) and encoder(webp/png/jpeg) for Node.js",
   "main": "index.js",
-  "bindingsCDN": "https://raw.githubusercontent.com/zhangyuanwei/node-images/master/bindings/",
-  "bindingMap": {
-    "0.8.0": [
-      "0.8.0",
-      "0.8.25"
-    ],
-    "0.9.11": [
-      "0.10.0",
-      "0.10.99"
-    ],
-    "0.12.0": [
-      "0.12.0",
-      "0.12.99"
-    ],
-    "4.0.0": [
-      "4.0.0",
-      "4.99.99"
-    ],
-    "5.0.0": [
-      "5.0.0",
-      "5.99.99"
-    ],
-    "6.0.0": [
-      "6.0.0",
-      "6.99.99"
-    ]
-  },
   "scripts": {
     "test": "node test.js",
-    "install": "echo \"Hello, World.\""
+    "install": "node ./scripts/install.js"
   },
+  "repositoryName": "zhangyuanwei/node-images",
   "repository": {
@@ -41,2 +15,9 @@ "type": "git",
   },
+  "dependencies": {
+    "mkdirp": "^0.5.1",
+    "nan": "^2.3.2",
+    "node-gyp": "^3.3.1",
+    "npmlog": "^4.0.0",
+    "request": "^2.79.0"
+  },
   "keywords": [
@@ -46,2 +27,3 @@ "image",
     "encoder",
+    "webp",
     "png",
@@ -58,9 +40,3 @@ "jpeg",
     "url": "https://github.com/zhangyuanwei/node-images/issues"
-  },
-  "devDependencies": {
-    "step": "0.0.5"
-  },
-  "dependencies": {
-    "nan": "^2.3.2"
   }
 }

README.md

@@ -16,13 +16,13 @@ ![images logo](https://raw.github.com/zhangyuanwei/node-images/master/demo/logo.png)
                                         //在(10,10)处绘制Logo
-    .save("output.jpg", {               //Save the image to a file,whih quality 50
+    .save("output.jpg", {               //Save the image to a file, with the quality of 50
         quality : 50                    //保存图片到文件,图片质量为50
-	});
+    });
 ```
 ## Features 功能特性
 
-* Lightweight:no need to install any image processing library.
+* Lightweight: no need to install any image processing library.
 * 轻量级：无需安装任何图像处理库。
 * Cross-platform: Released a compiled .node file on windows, just download and start.
 * 跨平台：Windows下发布了编译好的.node文件,下载就能用。
-* Easy-to-use: Provide jQuery-like chaining API.Simple and reliable!
+* Easy-to-use: Provide jQuery-like chaining API. Simple and reliable!
 * 方便用：jQuery风格的API，简单可依赖。
@@ -126,3 +126,3 @@
 ### images.gc()
-Forced call garbage collection  
+Forced garbage collection  
 强制调用V8的垃圾回收机制

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 10 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 30 instances in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Improved metrics

Dev dependency count

0

decreased by-100%

Lines of code

859

increased by63.62%

Number of medium supply chain risk alerts

3

decreased by-91.43%

Worsened metrics

Total package byte prevSize

818863

decreased by-96.25%

Dependency count

5

increased by400%

Number of package files

26

decreased by-50%

Number of low supply chain risk alerts

18

increased by260%

Dependency changes

• + Addedmkdirp@^0.5.1

• + Addednode-gyp@^3.3.1

• + Addednpmlog@^4.0.0

• + Addedrequest@^2.79.0

• + Addedabbrev@1.1.1(transitive)

• + Addedajv@6.12.6(transitive)

• + Addedansi-regex@2.1.1(transitive)

• + Addedaproba@1.2.0(transitive)

• + Addedare-we-there-yet@1.1.7(transitive)

• + Addedasn1@0.2.6(transitive)

• + Addedassert-plus@1.0.0(transitive)

• + Addedasynckit@0.4.0(transitive)

• + Addedaws-sign2@0.7.0(transitive)

• + Addedaws4@1.13.2(transitive)

• + Addedbalanced-match@1.0.2(transitive)

• + Addedbcrypt-pbkdf@1.0.2(transitive)

• + Addedblock-stream@0.0.9(transitive)

• + Addedbrace-expansion@1.1.11(transitive)

• + Addedcaseless@0.12.0(transitive)

• + Addedcode-point-at@1.1.0(transitive)

• + Addedcombined-stream@1.0.8(transitive)

• + Addedconcat-map@0.0.1(transitive)

• + Addedconsole-control-strings@1.1.0(transitive)

• + Addedcore-util-is@1.0.21.0.3(transitive)

• + Addeddashdash@1.14.1(transitive)

• + Addeddelayed-stream@1.0.0(transitive)

• + Addeddelegates@1.0.0(transitive)

• + Addedecc-jsbn@0.1.2(transitive)

• + Addedextend@3.0.2(transitive)

• + Addedextsprintf@1.3.0(transitive)

• + Addedfast-deep-equal@3.1.3(transitive)

• + Addedfast-json-stable-stringify@2.1.0(transitive)

• + Addedforever-agent@0.6.1(transitive)

• + Addedform-data@2.3.3(transitive)

• + Addedfs.realpath@1.0.0(transitive)

• + Addedfstream@1.0.12(transitive)

• + Addedgauge@2.7.4(transitive)

• + Addedgetpass@0.1.7(transitive)

• + Addedglob@7.2.3(transitive)

• + Addedgraceful-fs@4.2.11(transitive)

• + Addedhar-schema@2.0.0(transitive)

• + Addedhar-validator@5.1.5(transitive)

• + Addedhas-unicode@2.0.1(transitive)

• + Addedhttp-signature@1.2.0(transitive)

• + Addedinflight@1.0.6(transitive)

• + Addedinherits@2.0.4(transitive)

• + Addedis-fullwidth-code-point@1.0.0(transitive)

• + Addedis-typedarray@1.0.0(transitive)

• + Addedisarray@1.0.0(transitive)

• + Addedisexe@2.0.0(transitive)

• + Addedisstream@0.1.2(transitive)

• + Addedjsbn@0.1.1(transitive)

• + Addedjson-schema@0.4.0(transitive)

• + Addedjson-schema-traverse@0.4.1(transitive)

• + Addedjson-stringify-safe@5.0.1(transitive)

• + Addedjsprim@1.4.2(transitive)

• + Addedmime-db@1.52.0(transitive)

• + Addedmime-types@2.1.35(transitive)

• + Addedminimatch@3.1.2(transitive)

• + Addedminimist@1.2.8(transitive)

• + Addedmkdirp@0.5.6(transitive)

• + Addednode-gyp@3.8.0(transitive)

• + Addednopt@3.0.6(transitive)

• + Addednpmlog@4.1.2(transitive)

• + Addednumber-is-nan@1.0.1(transitive)

• + Addedoauth-sign@0.9.0(transitive)

• + Addedobject-assign@4.1.1(transitive)

• + Addedonce@1.4.0(transitive)

• + Addedos-homedir@1.0.2(transitive)

• + Addedos-tmpdir@1.0.2(transitive)

• + Addedosenv@0.1.5(transitive)

• + Addedpath-is-absolute@1.0.1(transitive)

• + Addedperformance-now@2.1.0(transitive)

• + Addedprocess-nextick-args@2.0.1(transitive)

• + Addedpsl@1.15.0(transitive)

• + Addedpunycode@2.3.1(transitive)

• + Addedqs@6.5.3(transitive)

• + Addedreadable-stream@2.3.8(transitive)

• + Addedrequest@2.88.2(transitive)

• + Addedrimraf@2.7.1(transitive)

• + Addedsafe-buffer@5.1.2(transitive)

• + Addedsafer-buffer@2.1.2(transitive)

• + Addedsemver@5.3.0(transitive)

• + Addedset-blocking@2.0.0(transitive)

• + Addedsignal-exit@3.0.7(transitive)

• + Addedsshpk@1.18.0(transitive)

• + Addedstring-width@1.0.2(transitive)

• + Addedstring_decoder@1.1.1(transitive)

• + Addedstrip-ansi@3.0.1(transitive)

• + Addedtar@2.2.2(transitive)

• + Addedtough-cookie@2.5.0(transitive)

• + Addedtunnel-agent@0.6.0(transitive)

• + Addedtweetnacl@0.14.5(transitive)

• + Addeduri-js@4.4.1(transitive)

• + Addedutil-deprecate@1.0.2(transitive)

• + Addeduuid@3.4.0(transitive)

• + Addedverror@1.10.0(transitive)

• + Addedwhich@1.3.1(transitive)

• + Addedwide-align@1.1.5(transitive)

• + Addedwrappy@1.0.2(transitive)