Security News
Supply Chain Attack Detected in Solana's web3.js Library
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
s3-image-optimizer
Advanced tools
Automagitically optimize your images on S3 with the magic of AWS Lambda.
Optim is a super-simple Lambda function that can listen to an S3 bucket for uploads, and runs everything it can through imagemin.
Clone this repo
Run npm install
Fill in AWS_ACCESS_KEY_ID
and AWS_SECRET_ACCESS_KEY
in .env
to a set of credentials that can create Lambda functions (alternatively have these already in your environment)
Create an IAM role for Optim to use. It needs the following permissions on all the S3 buckets you want to use (allowing these operations on ARN *
is easiest to start with):
getObject
putObject
putObjectAcl
Find the ARN for this role. It looks something like arn:aws:iam::1234567890:role/rolename
.
Fill in AWS_ROLE_ARN
in .env
Run npm run deploy
Hurrah, your Lambda function is now deployed! It'll be created with the name optim-production
unless you changed values in .env
You can now hook this function up to any S3 bucket you like in the management console. Easiest way is to follow AWS's guide
There are two sets of configuration here. The .env
file contains configuration related to setup and deployment, and runtime.env
is for configuration of how Optim behaves.
In .env
:
AWS_ACCESS_KEY_ID
: the AWS access key used to deploy the Lambda functionAWS_SECRET_ACCESS_KEY
: the corresponding secret access keyAWS_ROLE_ARN
: role with which the lambda function will be executedAWS_REGION
: which region to deploy toAWS_FUNCTION_NAME
and AWS_ENVIRONMENT
control naming of the lambda function createdAWS_MEMORY_SIZE
is the amount of memory given to your Lambda. It's also related to how much CPU share it gets. Since optimizing images is fairly intensive, probably best to keep this highAWS_TIMEOUT
runtime timeout for the lambda in seconds up to 5 minutes. Again, image optimization is fairly intensive so you'll probably want to leave this at the maximum of 300.In runtime.env
:
UPLOAD_ACL
: finalised images will be uploaded with this permission level. Should be one of private
public-read
public-read-write
aws-exec-read
authenticated-read
bucket-owner-read
bucket-owner-full-control
. Default is public-read
.MAX_FILE_SIZE
: files over this size in bytes will be skipped (e.g. big PNGs will probably just hit the timeout anyway). Set to -1
for no limitPNG_OPTIM_LEVEL
: Optimization level to use for PNGs, between 0 and 7. Lower level means faster optimization, higher means better results.FAQs
Optimise images on S3
The npm package s3-image-optimizer receives a total of 1 weekly downloads. As such, s3-image-optimizer popularity was classified as not popular.
We found that s3-image-optimizer demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.