jpeg-js - npm Package Compare versions

Comparing version 0.3.3 to 0.3.4

lib/decoder.js

@@ -750,2 +750,9 @@ /* -*- tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- /
             break;
+
+          case 0xFFFF: // Fill bytes
+            if (data[offset] !== 0xFF) { // Avoid skipping a valid marker.
+              offset--;
+            }
+            break;
+
           default:
@@ -752,0 +759,0 @@ if (data[offset - 3] == 0xFF &&

package.json

 {
   "name": "jpeg-js",
-  "version": "0.3.3",
+  "version": "0.3.4",
   "description": "A pure javascript JPEG encoder and decoder",
@@ -5,0 +5,0 @@ "main": "index.js",

README.md

@@ -69,3 +69,5 @@ # jpeg-js
 /*
-<Buffer 5b 40 29 ff 59 3e 29 ff 54 3c 26 ff 55 3a 27 ff 5a 3e 2f ff 5c 3c 31 ff 58 35 2d ff 5b 36 2f ff 55 35 32 ff 5a 3a 37 ff 54 36 32 ff 4b 32 2c ff 4b 36 ... >
+{ width: 320,
+  height: 180,
+  data: <Buffer 5b 40 29 ff 59 3e 29 ff 54 3c 26 ff 55 3a 27 ff 5a 3e 2f ff 5c 3c 31 ff 58 35 2d ff 5b 36 2f ff 55 35 32 ff 5a 3a 37 ff 54 36 32 ff 4b 32 2c ff 4b 36 ... > }
 */
@@ -154,3 +156,3 @@ ```
 <tr><th align="left">Peter Liljenberg</th><td><a href="https://github.com/petli">GitHub/petli</a></td></tr>
-<tr><th align="left">Flandre Scarlet</th><td><a href="https://github.com/XadillaX">GitHub/XadillaX</a></td></tr>
+<tr><th align="left">XadillaX</th><td><a href="https://github.com/XadillaX">GitHub/XadillaX</a></td></tr>
 <tr><th align="left">strandedcity</th><td><a href="https://github.com/strandedcity">GitHub/strandedcity</a></td></tr>
@@ -157,0 +159,0 @@ <tr><th align="left">wmossman</th><td><a href="https://github.com/wmossman">GitHub/wmossman</a></td></tr>

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Number of lines in readme file

161

increased by1.26%

Number of low supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

64609

decreased by-98.67%

Number of package files

9

decreased by-72.73%

Lines of code

1606

decreased by-9.21%

No dependency changes