![Maven Central Adds Sigstore Signature Validation](https://cdn.sanity.io/images/cgdhsj6q/production/7da3bc8a946cfb5df15d7fcf49767faedc72b483-1024x1024.webp?w=400&fit=max&auto=format)
Security News
Maven Central Adds Sigstore Signature Validation
Maven Central now validates Sigstore signatures, making it easier for developers to verify the provenance of Java packages.
Hello!! Dragonfly is a highly customizable ruby gem for handling images and other attachments and is already in use on thousands of websites.
If you want to generate image thumbnails in Rails ...
class User < ActiveRecord::Base # model
dragonfly_accessor :photo
end
<%= image_tag @user.photo.thumb('300x200#').url if @user.photo_stored? # view %>
... or generate text images on-demand in Sinatra ...
get "/:text" do |text|
Dragonfly.app.generate(:text, text, "font-size" => 32).to_response(env)
end
... or just generally manage attachments in your web app ...
wav = Dragonfly.app.fetch_url("http://free.music/lard.wav") # GET from t'interwebs
mp3 = wav.to_mp3 # to_mp3 is a custom processor
uid = mp3.store # store in the configured datastore, e.g. S3
url = Dragonfly.app.remote_url_for(uid) # ===> http://s3.amazon.com/my-stuff/lard.mp3
... then Dragonfly is for you! See the documentation to get started!
THE MAIN DOCUMENTATION IS HERE!!!
gem install dragonfly
or in your Gemfile
gem 'dragonfly', '~> 1.4.0'
Require with
require 'dragonfly'
See the Articles wiki for articles and tutorials.
Please feel free to contribute!!
See the Wiki and see the pages list for examples.
Please feel free to contribute!!
See the Add-ons wiki.
Please feel free to contribute!!
If you have set verify_urls
to false
(which is not recommended) then you should upgrade to version 1.4.x
for a security fix (CVE-2021-33564).
Please use the github issue tracker if you have any issues.
There are known issues when using with json gem version 1.5.2 which can potentially cause an "incorrect sha" error for files with non-ascii characters in the name. Please see https://github.com/markevans/dragonfly/issues/387 for more information.
See Travis-CI for tested versions.
Dragonfly has changed somewhat since version 0.9. See the Upgrading wiki for notes on changes, and feel free to add anything you come across while upgrading!
Changes are listed in History.md
If for whatever reason you can't upgrade, then the docs for version 0.9.x are here.
Mark Evans (author) with awesome contributions from these guys
FAQs
Unknown package
We found that dragonfly demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Maven Central now validates Sigstore signatures, making it easier for developers to verify the provenance of Java packages.
Security News
CISOs are racing to adopt AI for cybersecurity, but hurdles in budgets and governance may leave some falling behind in the fight against cyber threats.
Research
Security News
Socket researchers uncovered a backdoored typosquat of BoltDB in the Go ecosystem, exploiting Go Module Proxy caching to persist undetected for years.