
Security News
Package Maintainers Call for Improvements to GitHub’s New npm Security Plan
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
thumbor-client
Advanced tools
A simple and efficient Thumbor client for TypeScript/JavaScript (works on node and browser).
A simple and efficient Thumbor client for TypeScript/JavaScript (works on node and browser).
# via npm
$ npm i thumbor-client
# via yarn
$ yarn add thumbor-client
# via bun
$ bun add thumbor-client
import { createThumbor } from 'thumbor-client'
const thumbor = createThumbor({
url: 'https://your-thumbor.com',
key: 'secret'
})
const imgUrl = thumbor
.fromUrl('https://cataas.com/cat')
.smartCrop(true)
.resize(300, 200)
.buildURL()
console.log(imageUrl)
// https://your-thumbor.com/unsafe/300x200/smart/https://cataas.com/cat
You can use thumbor-client
from a CDN via a script tag:
<script src="https://unpkg.com/thumbor-client/dist/thumbor-client.js"></script>
Here we are using unpkg
, but you can also use any CDN that serves npm packages, for example jsdelivr
or cdnjs
.
Of course, you can also download this file and serve it yourself.
When using thumbor-client
from a CDN, there is no "build step" (bundler) involved. This makes the setup a lot simpler,
and is suitable for enhancing static HTML or integrating with a backend framework. However, you won't be able to use frameworks.
Throughout the rest of the documentation, we will be primarily using ES modules syntax.
Most modern browsers now support ES modules natively, so we can use thumbor-client
from a CDN via native ES modules like this:
<script type="module">
import { createThumbor } from 'https://unpkg.com/thumbor-client/dist/thumbor-client.js'
const thumbor = createThumbor({
url: 'https://your-thumbor.com',
key: 'secret'
})
const imgUrl = thumbor
.fromUrl('https://cataas.com/cat')
.smartCrop(true)
.resize(300, 200)
.buildURL()
console.log(imageUrl)
// https://your-thumbor.com/unsafe/300x200/smart/https://cataas.com/cat
</script>
In the above example, we are importing from the full CDN URL, but in the rest of the documentation you will see code like this:
import { createThumbor } from 'thumbor-client'
We can teach the browser where to locate the thumbor-client
import by using Import Maps:
<script type="importmap">
{
"imports": {
"thumbor-client": "https://unpkg.com/thumbor-client/dist/thumbor-client.js"
}
}
</script>
<script type="module">
import { createThumbor } from 'thumbor-client'
const thumbor = createThumbor({
url: 'https://your-thumbor.com',
key: 'secret'
})
const imgUrl = thumbor
.fromUrl('https://cataas.com/cat')
.smartCrop(true)
.resize(300, 200)
.buildURL()
console.log(imageUrl)
// https://your-thumbor.com/unsafe/300x200/smart/https://cataas.com/cat
</script>
MIT
© 2023 azabroflovski
FAQs
A simple and efficient Thumbor client for TypeScript/JavaScript (works on node and browser).
The npm package thumbor-client receives a total of 51 weekly downloads. As such, thumbor-client popularity was classified as not popular.
We found that thumbor-client demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
Product
Socket Firewall is a free tool that blocks malicious packages at install time, giving developers proactive protection against rising supply chain attacks.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.