Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Note: you can try sharp-gif2 first, it is base on gifenc, has faster encoding speed.
Generate animated GIF/WebP for sharp base on gif-encoder.
+ + =
npm install sharp-gif
const fs = require("fs");
const sharp = require("sharp");
const GIF = require("sharp-gif");
(async () => {
// Simple use case
const image = await GIF
.createGif()
.addFrame([
sharp("./frames/0000.png"),
sharp("./frames/0001.png"),
sharp("./frames/0002.png"),
])
.toSharp();
image.toFile("./frames.gif");
// Can also generate an animated WebP
image.toFile("./frames.webp");
// Options
const gif = GIF.createGif({
// GifEncoder constructor options
gifEncoderOptions: { highWaterMark: 64 },
// Sharp constructor options
sharpOptions: {},
// Custom size
width: 300,
height: 200,
// Amount of milliseconds to delay between frames
delay: 200,
// Amount of times to repeat GIF
repeat: 0,
// GIF quality
quality: 10,
// Define the color which represents transparency in the GIF.
transparent: "#FFFFFF",
// Resize all frame to `largest` or `smallest`
resizeTo: "largest",
// Resize by `zoom` or `crop`
resizeType: "zoom",
// Options for sharp.resize()
resizeOptions: {},
// Background option for sharp.extend()
extendBackground: { r: 0, g: 0, b: 0, alpha: 0 },
});
gif.addFrame(sharp("./1.png"));
gif.addFrame(sharp("./2.png"));
const image = await gif.toSharp();
image.toFile("./frames.gif");
// Trace encoding progress
const image = await GIF
.createGif()
.addFrame(
fs.readdirSync("./frames")
.map((file) => sharp(`./frames/${file}`))
)
.toSharp(({ total, encoded }) => {
console.log(`${encoded}/${total}`);
});
image.toFile("./frames.gif");
// You can even concat animated GIFs
const image = await GIF
.createGif({ transparent: "#FFFFFF", })
.addFrame([
sharp("./1.gif", { animated: true }),
sharp("./2.gif", { animated: true }),
])
.toSharp();
image.toFile("./concat.gif");
})();
const sharp = require("sharp");
const GIF = require("sharp-gif");
(async () => {
const reader = GIF.readGif(sharp("./2.gif", { animated: true }));
const frames = await reader.toFrames();
frames.forEach((frame, index) => {
// You can process each frame here
// Or just simple output frame
frame.toFile(`./output/${("000" + index).substr(-4)}.png`);
});
const gif = await reader.toGif({ transparent: "#FFFFFF", });
const image = await gif.toSharp();
image.toFile("./output/remake.gif");
})();
GIF.createGif(options?: Object): Gif
options
Object (optional)
gifEncoderOptions
Object (optional) - GifEncoder constructor options.
highWaterMark
Number - Number, in bytes, to store in internal buffer. Defaults to 64kB.sharpOptions
Object (optional) - Sharp constructor options.width
Number (optional) - Width, in pixels, of the GIF to output.height
Number (optional) - Height, in pixels, of the GIF to output.delay
Number (optional) - Amount of milliseconds to delay between frames.repeat
Number (optional) - Amount of times to repeat GIF. Default by 0
, loop indefinitely.quality
Number (optional) - GIF quality. 1
is best colors and worst performance, 20
is suggested maximum but there is no limit. Default by 10
.transparent
String (optional) - Define the color which represents transparency in the GIF.resizeTo
("largest" | "smallest") (optional) - Resize all frame to the largest
frame or smallest
frame size. Default by largest
.resizeType
("zoom" | "crop") (optional) - zoom
use sharp.resize(), crop
use sharp.extend() and sharp.extract().resizeOptions
sharp.ResizeOptions (optional) - Options for sharp.resize().extendBackground
sharp.Color (optional) - Background option for sharp.extend().Returns Gif
- Return a instance of Gif Contains the following methods:
gif.addFrame(frame: Sharp | Sharp[]): Gif
frame
(Sharp | Sharp[]) - An instance of Sharp, or an array of instance of Sharp.Returns Gif
- Return the Gif instance for chaining.
gif.toSharp(progress?: Function, encoder?: GifEncoder): Promise<Sharp>
Encode all frames and resolve with an animated Sharp instance.
progress
(info: Object) => void (optional) - Frames encoding progress.
info
Object - Note that the frames count contains GIF header end footer (as 2 frames).
total
Number - Total frames count.encoded
Number - Encoded frames count.encoder
GifEncoder (optional) - Custom GifEncoder.Returns Promise<Sharp>
- Resolve with an instance of Sharp.
gif.toBuffer(progress?: Function, encoder?: GifEncoder): Promise<Buffer>
Encode all frames and resolve with an animated GIF buffer.
gif.getEncoder(width: Number, height: Number, options?: Object): GIFEncoder
Return a new instance of GIFEncoder. See new GifEncoder.
GIF.readGif(image: Sharp): GifReader
image
Sharp - An instance of SharpReturns GifReader
- Return a instance of GifReader Contains the following methods:
reader.toFrames(): Promise<Sharp[]>
Cut GIF frames.
Returns Promise<Sharp[]>
- Resolve with cutted frames (an array of instance of Sharp).
reader.toGif(options?: Object): Promise<Gif>
Create Gif from cutted frames.
options
Object (optional) - Options for createGif(). See createGif.Returns Promise<Gif>
- Resolve with an instance of Gif.
A shortcut to create a Gif with the cutted frames, equal to:
GIF.createGif(options).addFrame(reader.frames || (await reader.toFrames()));
GifReader
for cutting frames.FAQs
Generate animated GIF/WebP for sharp base on gif-encoder.
The npm package sharp-gif receives a total of 63 weekly downloads. As such, sharp-gif popularity was classified as not popular.
We found that sharp-gif demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.