`sharp`

Ecosystem:
npm

Package URL:
pkg:npm/sharp

Total PRs:
37,255 Dependabot PRs

Latest PR:
about 3 hours ago

Unique Repositories:
7,560 repositories

Unique Repos (30 days):
108 repositories

Security Advisories

sharp vulnerability in libwebp dependency CVE-2023-4863

GHSA-54xq-cgqr-rpm3 HIGH published over 2 years ago • updated 38 minutes ago

## Overview sharp uses libwebp to decode WebP images and versions prior to the latest 0.32.6 are vulnerable to the high severity https://github.co...

sharp vulnerable to Command Injection in post-installation over build environment

GHSA-gp95-ppv5-3jc5 CVE-2022-29256 MODERATE published about 4 years ago • updated 38 minutes ago

There's a possible vulnerability in logic that is run only at `npm install` time when installing versions of `sharp` prior to the latest v0.30.5. ...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

Bump the production-dependencies group across 1 directory with 31 updates

Luminous-Flame/blog #23

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 30 updates

ratbase/quartz-blog #21

0.34.3 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 31 updates

Ben-Daming/quartz #23

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 25 updates

fjolsvidur/Genres-Metal #13

0.34.4 → 0.34.5 Patch PR

Open 4 months ago 2 comments

chore(deps): bump the production-dependencies group across 1 directory with 34 updates

kabushPasha/CanoeWiki #28

0.34.1 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 31 updates

lifupin/obsidian #22

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 2 comments

Bump the production-dependencies group across 1 directory with 31 updates

MadhavKauntia/second-brain #19

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 1 comment

Bump the production-dependencies group across 1 directory with 31 updates

SimoneTestino/SimoneTestino #22

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 24 updates

InquisitiveBadger/moesfrontmatters #23

0.34.4 → 0.34.5 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump the dependencies group across 1 directory with 36 updates

amak07/acr-automotive #44

0.34.4 → 0.34.5 Patch PR

Closed 4 months ago 3 comments

chore(deps): bump the framework-ecosystem group with 12 updates

julie-nutrition/website #30

0.34.2 → 0.34.5 Patch PR

Closed 4 months ago 7 comments

build(deps): bump the npm-production-dependencies group across 2 directories with 34 updates

BramVerkuijlen/Minimal-OTel-Demo #84

0.34.4 → 0.34.5 Patch PR

Open 4 months ago 1 comment

Bump the npm-production-dependencies group across 2 directories with 33 updates

diki-haryadi/opentelemetry-demo #69

0.34.4 → 0.34.5 Patch PR

Closed 4 months ago 1 comment

build(deps): bump the npm-production-dependencies group across 2 directories with 33 updates

monoscope-tech/oteldemo #80

0.34.4 → 0.34.5 Patch PR

Closed 4 months ago 1 comment

Bump the production-dependencies group across 1 directory with 30 updates

cepedus/cepedus.github.io #59

0.34.2 → 0.34.5 Patch PR

Closed 4 months ago 2 comments

Bump the patch-updates group with 13 updates

Zakaria-Farahi/sec #15

0.34.4 → 0.34.5 Patch PR

Closed 5 months ago 2 comments

Bump the production-dependencies group across 1 directory with 29 updates

IVIX2020/IVIX2020.github.io #19

0.34.3 → 0.34.5 Patch PR

Closed 5 months ago 1 comment

Bump the patch-updates group with 13 updates

limingjing6666/my-personal-blog #11

0.34.4 → 0.34.5 Patch PR

Open 5 months ago 1 comment

Bump the minor group across 1 directory with 10 updates

Balve-user/garmeres_v3 #369

0.34.2 → 0.34.5 Patch PR

Open 5 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 30 updates

zarra-em/slow-bloom #18

0.34.2 → 0.34.5 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 27 updates

reletz/sys #5

0.34.3 → 0.34.5 Patch PR

Closed 5 months ago 2 comments

chore(deps): bump the patch-updates group with 13 updates

hebeiabc/blog #15

0.34.4 → 0.34.5 Patch PR

Closed 5 months ago 2 comments

Bump the production-dependencies group across 1 directory with 23 updates

lunarconstruct/lunatine-web #13

0.34.4 → 0.34.5 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 29 updates

PVGCeti/NotasYProyectos #19

0.34.3 → 0.34.5 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 24 updates

fr-gance/Requiem #15

0.34.4 → 0.34.5 Patch PR

Open 5 months ago 1 comment

Bump the production-dependencies group across 1 directory with 30 updates

yeongseoksong/blog #19

0.34.2 → 0.34.5 Patch PR

Open 5 months ago 1 comment

build(deps): bump the production-dependencies group across 1 directory with 53 updates

1ih29c2002-max/ruknyio #9

0.34.4 → 0.34.5 Patch PR

Open 5 months ago 2 comments

chore(deps): bump the production-dependencies group across 1 directory with 27 updates

garylli/blog #20

0.34.3 → 0.34.5 Patch PR

Closed 5 months ago 1 comment

Bump the production-dependencies group across 1 directory with 30 updates

OstSandbox/digital-cortex #20

0.34.2 → 0.34.5 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 30 updates

LocoTrace/tabakovskiy-wiki #28

0.34.2 → 0.34.5 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 29 updates

mhmdjavad-cs/study_notes #20

0.34.3 → 0.34.5 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 29 updates

ModernHuman0531/My_quartz #21

0.34.3 → 0.34.5 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 27 updates

SuwonJ/quartz #18

0.34.3 → 0.34.5 Patch PR

Closed 5 months ago 1 comment

Bump the production-dependencies group across 1 directory with 30 updates

craftsmandigital/quartz-how-to-do-stuff #17

0.34.3 → 0.34.5 Patch PR

Closed 5 months ago 2 comments

chore(deps): bump the production-dependencies group across 1 directory with 30 updates

yijencheng/obsidian-leetcode #28

0.34.3 → 0.34.5 Patch PR

Open 5 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 31 updates

Baegll/ArenaNightsBlackAgents #32

0.34.2 → 0.34.5 Patch PR

Closed 5 months ago 1 comment

Bump the production-dependencies group across 1 directory with 27 updates

MintBee/MintBee.github.io #21

0.34.3 → 0.34.5 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 30 updates

madphrogi/meis-pf #20

0.34.2 → 0.34.5 Patch PR

Closed 5 months ago 2 comments

chore(deps): bump the production-dependencies group across 1 directory with 29 updates

drakosoldier298/horrorttrpg #21

0.34.3 → 0.34.5 Patch PR

Open 5 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 30 updates

Aviral3010/Publish #20

0.34.2 → 0.34.5 Patch PR

Open 5 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 30 updates

alexsmity/web #20

0.34.2 → 0.34.5 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 30 updates

Zrief/zriefblog #21

0.34.2 → 0.34.5 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 30 updates

letungbach/un #19

0.34.2 → 0.34.5 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 27 updates

killerbossoriginal/wiki #17

0.34.3 → 0.34.5 Patch PR

Closed 5 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 29 updates

IshadP/World #19

0.34.3 → 0.34.5 Patch PR

Open 5 months ago 1 comment

Bump the production-dependencies group across 1 directory with 29 updates

oREAGanoWombat/theis-lab-quartz-sync #23

0.34.3 → 0.34.5 Patch PR

Closed 5 months ago 1 comment

Bump the production-dependencies group across 1 directory with 29 updates

tagmach11/manual-guide #19

0.34.3 → 0.34.5 Patch PR

Open 5 months ago 3 comments

chore(deps): bump the production-dependencies group across 1 directory with 29 updates

KhangTimm/ttrpg #23

0.34.3 → 0.34.5 Patch PR

Closed 5 months ago 1 comment

Bump the patch-updates group with 13 updates

snyi001/kaiden001s.github.io #9

0.34.4 → 0.34.5 Patch PR

Closed 5 months ago 1 comment

Bump the production-dependencies group across 1 directory with 23 updates

ofer1992/cookbook #12

0.34.4 → 0.34.5 Patch PR

Closed 5 months ago 1 comment

Package Details

Name:	`sharp`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/sharp`
JSON API:	View JSON

Security Advisories

2

Active advisories

HIGH 1

MODERATE 1

View All npm Advisories

Package Information

Description:

High performance Node.js image processing, the fastest module to resize JPEG, PNG, WebP, GIF, AVIF and TIFF images

Repository:	https://github.com/lovell/sharp
Homepage:	https://sharp.pixelplumbing.com
Latest Release:	`0.34.2` about 1 year ago
Dependent Repos:	178,353
Dependent Packages:	4,168
Downloads:	57,954,003
Ranking:	Top 0.0825% by dependent repos Top 0.0738% by downloads Top 0.0239% by dependent pkgs

PR Status

Open 17,696 (47.5%)

Merged 776 (2.1%)

Closed 15,947 (42.8%)

PR Types

Minor 7,453 (20.0%)

Patch 26,959 (72.4%)

Removal 6 (0.0%)