Huge News!Announcing our $40M Series B led by Abstract Ventures.Learn More
Socket
Sign inDemoInstall
Socket

rightimage

Package Overview
Dependencies
Maintainers
1
Versions
20
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

rightimage

Stream images with dynamic re-orientation

  • 1.2.0
  • Source
  • npm
  • Socket score

Version published
Weekly downloads
4.5K
increased by47.3%
Maintainers
1
Weekly downloads
 
Created
Source

rightimage

NPM version Build Status Coverage Status

This module is a small library for streaming dynamic images. Its key feature is to automatically detect and correct oritentation.

Use

The library exposes a function that can be passed image processing options and will return a stream. We carefully arrange for error propogation and teardown of resources to ensure operation in servers is safe.

const fs = require("fs");

const rightImage = require("rightimage");

rightImage.createRightImagePipeline(
  {
    contentType: "image/jpeg",
    imageOptions: {
      setFormat: "png",
      resize: "100,100"
    },
    inputStream: fs.createReadStream("./testdata/test.jpg")
  },
  (err, pipelineResult) => {
    if (err) {
      // call error handling code
      return callback(err);
    }

    const { outputContentType, outputStream } = pipelineResult;

    const outputFile = "./testdata/output/test_small.png";
    const outputFileStream = fs.createWriteStream(outputFile);
    outputFileStream.on("close", () => {
      // call some callback to signify success
      callback(null, `wrote an ${outputContentType} to path ${outputFile}`);
    });

    outputStream.pipe(outputFileStream);
  }
);
'wrote an image/png to path ./testdata/output/test_small.png'

The example above would take the test JPEG file in the project repository and convert it to a 100x100 PNG write the output "wrote image/png". Since the source JPEG has an orientation, it will be oriented correctly without any additional steps required.

Implementation

The primary trick is to read the first 128K bytes of the image on-the-fly and parse the EXIF data for the image oritentation. We use any present orientation data to calculate the correction required and trigger rotation via image processing libraries. The image data is never buffered.

Production safety

This module is intended to be used in production situations for the dynamic conversion of untrusted image data; it is imperative that the library is safe. A great deal of emphasis has been placed on error codepath hardening and the validation of any operations that will be performed.

Every requested format conversion and transformation operation is checked against a set of whitelisted operations and the module will not proceed if these checks fail. This module will always prefer a safer feature subset.

Image processing

Internally two modules are used to do the core image manipulation work.

impro

This awesome library wraps multiple image libraries - those configured by rightimage are sharp and Gifsicle (for the correct conversion of all GIFs including those with animated frames).

We bypass the outer layer and instead use the lower-level "operations API" where we construct an array of operations and pass that directly into the core fo the library. Based on input options and input content-type, will construct a streaming pipeline that will perform the conversion.

jpegtran

In the case of JPEGs that require nothing more than an orientation change we switch over to the jpegtran library to ensure we make a best effort to best preserve the image quality.

FAQs

Package last updated on 13 May 2021

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc