
Product
Introducing Immutable Scans
Scan results now load faster and remain consistent over time, with stable URLs and on-demand rescans for fresh security data.
repo-images
Advanced tools
Collect all the image file URLs in a GitHub repository
npm install repo-images --save
const repoImages = require('repo-images')
repoImages('user/repo').then(images => {
// an array of image objects
})
Each object in the returned array has this structure:
{
path: 'build/icon.icns',
mode: '100644',
type: 'blob',
sha: '3e7e2a36f9d1a5dfcaae886d0c0e5043b3ffee6a',
size: 1192844,
url: 'https://api.github.com/repos/ummoji/ummoji-desktop/git/blobs/3e7e2a36f9d1a5dfcaae886d0c0e5043b3ffee6a',
rawgit: 'https://cdn.rawgit.com/ummoji/ummoji-desktop/master/build/icon.icns'
}
The default branch is master, but you can override it:
repoImages('user/repo', {branch: 'not-master'})
token option is set, it will be used.process.env.GITHUB_ACCESS_TOKEN is set, it will be used.If you don't like promises, you can use a node-style callback:
repoImages('user/repo', function(err, images) {
if (err) throw err
console.log(images)
})
npm install
npm test
got to interact with the GitHub APIMIT
Generated by package-json-to-readme
FAQs
Collect all the image file URLs in a GitHub repository
We found that repo-images demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Scan results now load faster and remain consistent over time, with stable URLs and on-demand rescans for fresh security data.

Product
Socket's new Alert Details page is designed to surface more context, with a clearer layout, reachability dependency chains, and structured review.

Product
Campaign-level threat intelligence in Socket now shows when active supply chain attacks affect your repositories and packages.