Socket
Socket
Sign inDemoInstall

rightimage

Package Overview
Dependencies
219
Maintainers
1
Versions
20
Alerts
File Explorer

Advanced tools

Install Socket

Detect and block malicious and high-risk dependencies

Install

    rightimage

Stream images with dynamic re-orientation


Version published
Weekly downloads
1K
increased by27.48%
Maintainers
1
Created
Weekly downloads
 

Changelog

Source

v2.0.0 (2022-03-15)

  • Upgrade to sharp 0.30.0. (Alex J Burke)
  • Raise the minimum node version to 12. (Alex J Burke)

Readme

Source

rightimage

NPM version Build Status Coverage Status

This module is a small library for streaming dynamic images. Its key feature is to automatically detect and correct oritentation.

Use

The library exposes a function that can be passed image processing options and will return a stream. We carefully arrange for error propogation and teardown of resources to ensure operation in servers is safe.

const fs = require("fs");

const rightImage = require("rightimage");

rightImage.createRightImagePipeline(
  {
    contentType: "image/jpeg",
    imageOptions: {
      setFormat: "png",
      resize: "100,100"
    },
    inputStream: fs.createReadStream("./testdata/test.jpg")
  },
  (err, pipelineResult) => {
    if (err) {
      // call error handling code
      return callback(err);
    }

    const { outputContentType, outputStream } = pipelineResult;

    const outputFile = "./testdata/output/test_small.png";
    const outputFileStream = fs.createWriteStream(outputFile);
    outputFileStream.on("close", () => {
      // call some callback to signify success
      callback(null, `wrote an ${outputContentType} to path ${outputFile}`);
    });

    outputStream.pipe(outputFileStream);
  }
);
'wrote an image/png to path ./testdata/output/test_small.png'

The example above would take the test JPEG file in the project repository and convert it to a 100x100 PNG write the output "wrote image/png". Since the source JPEG has an orientation, it will be oriented correctly without any additional steps required.

Implementation

The primary trick is to read the first 128K bytes of the image on-the-fly and parse the EXIF data for the image oritentation. We use any present orientation data to calculate the correction required and trigger rotation via image processing libraries. The image data is never buffered.

Production safety

This module is intended to be used in production situations for the dynamic conversion of untrusted image data; it is imperative that the library is safe. A great deal of emphasis has been placed on error codepath hardening and the validation of any operations that will be performed.

Every requested format conversion and transformation operation is checked against a set of whitelisted operations and the module will not proceed if these checks fail. This module will always prefer a safer feature subset.

Image processing

Internally two modules are used to do the core image manipulation work.

impro

This awesome library wraps multiple image libraries - those configured by rightimage are sharp and Gifsicle (for the correct conversion of all GIFs including those with animated frames).

We bypass the outer layer and instead use the lower-level "operations API" where we construct an array of operations and pass that directly into the core fo the library. Based on input options and input content-type, will construct a streaming pipeline that will perform the conversion.

jpegtran

In the case of JPEGs that require nothing more than an orientation change we switch over to the jpegtran library to ensure we make a best effort to best preserve the image quality.

FAQs

Last updated on 17 Mar 2022

Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc