`sharp`

Ecosystem:
npm

Package URL:
pkg:npm/sharp

Total PRs:
37,242 Dependabot PRs

Latest PR:
about 14 hours ago

Unique Repositories:
7,549 repositories

Unique Repos (30 days):
105 repositories

Security Advisories

sharp vulnerability in libwebp dependency CVE-2023-4863

GHSA-54xq-cgqr-rpm3 HIGH published over 2 years ago • updated about 1 hour ago

## Overview sharp uses libwebp to decode WebP images and versions prior to the latest 0.32.6 are vulnerable to the high severity https://github.co...

sharp vulnerable to Command Injection in post-installation over build environment

GHSA-gp95-ppv5-3jc5 CVE-2022-29256 MODERATE published about 4 years ago • updated about 3 hours ago

There's a possible vulnerability in logic that is run only at `npm install` time when installing versions of `sharp` prior to the latest v0.30.5. ...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

chore(deps): bump the production-dependencies group across 1 directory with 34 updates

rorysb/rorysb.github.io #30

0.34.2 → 0.34.5 Patch PR

Open 2 months ago 1 comment

build(deps): bump the everything group across 1 directory with 11 updates

DerTimonius/til-blog #296

0.34.4 → 0.34.5 Patch PR

Open 2 months ago 2 comments

chore(deps): bump the minor-and-patch group across 1 directory with 52 updates

CodeWizarz/spec-flow #24

0.34.3 → 0.34.5 Patch PR

Open 2 months ago 3 comments

Bump the npm-production-dependencies group across 2 directories with 37 updates

El-Darawii/Proactive-Microservices-Autoscaling-Framework #140

0.34.4 → 0.34.5 Patch PR

Closed 2 months ago 1 comment

Bump the production-dependencies group across 1 directory with 34 updates

cepedus/cepedus.github.io #71

0.34.2 → 0.34.5 Patch PR

Open 2 months ago 1 comment

Bump the production-dependencies group across 1 directory with 35 updates

cepedus/cepedus.github.io #70

0.34.2 → 0.34.5 Patch PR

Closed 2 months ago 2 comments

build(deps): bump the npm-production-dependencies group across 2 directories with 36 updates

jesusr-db/zerobus_otel_src #146

0.34.4 → 0.34.5 Patch PR

Closed 3 months ago 1 comment

build(deps): bump the npm-production-dependencies group across 2 directories with 37 updates

BramVerkuijlen/Minimal-OTel-Demo #175

0.34.4 → 0.34.5 Patch PR

Closed 3 months ago 1 comment

build(deps): bump the npm-production-dependencies group across 2 directories with 37 updates

laurentpf5/opentelemetry-nginx-demo #271

0.34.4 → 0.34.5 Patch PR

Closed 3 months ago 1 comment

build(deps): bump the production-dependencies group across 1 directory with 54 updates

hackathonweekly/community #34

0.34.4 → 0.34.5 Patch PR

Closed 3 months ago 1 comment

Bump the patch-updates group with 15 updates

nostalgia296/nostalgia296.github.io #17

0.34.4 → 0.34.5 Patch PR

Open 3 months ago 1 comment

Bump the npm-production-dependencies group across 2 directories with 36 updates

apcurrier/otel-demo-coralogix #172

0.34.4 → 0.34.5 Patch PR

Closed 3 months ago 1 comment

build(deps): bump the npm-production-dependencies group across 2 directories with 36 updates

jesusr-db/zerobus_otel_src #145

0.34.4 → 0.34.5 Patch PR

Closed 3 months ago 1 comment

Bump the npm-production-dependencies group across 2 directories with 36 updates

diki-haryadi/opentelemetry-demo #154

0.34.4 → 0.34.5 Patch PR

Closed 3 months ago 1 comment

build(deps): bump the everything group with 11 updates

DerTimonius/til-blog #291

0.34.4 → 0.34.5 Patch PR

Closed 3 months ago 3 comments

build(deps): bump the patch-minor group across 1 directory with 5 updates

carafelix/haiku #7

0.34.3 → 0.34.5 Patch PR

Open 3 months ago 1 comment

chore(deps-dev): bump the development-dependencies group across 1 directory with 29 updates

Sskutushev/MyPortfolio #30

0.34.4 → 0.34.5 Patch PR

Open 3 months ago 2 comments

chore(deps): bump the minor-and-patch group across 1 directory with 51 updates

CodeWizarz/spec-flow #20

0.34.3 → 0.34.5 Patch PR

Open 3 months ago 3 comments

chore(deps): bump the minor-and-patch group across 1 directory with 52 updates

asaleem9/deployflow #19

0.34.3 → 0.34.5 Patch PR

Closed 3 months ago 2 comments

chore(deps): bump the minor-and-patch group across 1 directory with 51 updates

sudhanshuv1/plane #18

0.34.3 → 0.34.5 Patch PR

Closed 3 months ago 2 comments

Bump the patch-updates group across 1 directory with 20 updates

siriusclass/personal-space #31

0.34.2 → 0.34.5 Patch PR

Closed 3 months ago 1 comment

Bump the npm-production-dependencies group across 2 directories with 35 updates

apcurrier/otel-demo-coralogix #157

0.34.4 → 0.34.5 Patch PR

Closed 3 months ago 1 comment

Bump the production-dependencies group across 1 directory with 32 updates

sysmae/obsidian-digital-garden #26

0.34.3 → 0.34.5 Patch PR

Closed 3 months ago 2 comments

build(deps): bump the production-dependencies group across 1 directory with 61 updates

zhou-ze-chen/supastarter-nextjs #8

0.34.4 → 0.34.5 Patch PR

Closed 3 months ago 2 comments

Bump the npm-production-dependencies group across 2 directories with 35 updates

diki-haryadi/opentelemetry-demo #133

0.34.4 → 0.34.5 Patch PR

Closed 3 months ago 1 comment

Bump the patch-updates group with 21 updates

12306le/isle #27

0.34.2 → 0.34.5 Patch PR

Open 3 months ago 1 comment

Bump the patch-updates group across 1 directory with 20 updates

Pinpe/delay #24

0.34.2 → 0.34.5 Patch PR

Open 3 months ago 1 comment

build(deps): bump the production-dependencies group across 1 directory with 60 updates

1ih29c2002-max/ruknyio #17

0.34.4 → 0.34.5 Patch PR

Closed 3 months ago 2 comments

chore(deps): bump the minor-and-patch group across 1 directory with 52 updates

debianmaster/plane #18

0.34.3 → 0.34.5 Patch PR

Closed 3 months ago 2 comments

build(deps): bump the patch-minor group across 1 directory with 6 updates

carafelix/haiku #6

0.34.3 → 0.34.5 Patch PR

Closed 3 months ago 2 comments

chore(deps-dev): bump sharp from 0.34.3 to 0.34.5

SecPal/secpal.app #7

0.34.3 → 0.34.5 Patch PR

Open 3 months ago 4 comments

Bump the patch-minor group across 1 directory with 6 updates

ngthuongdoan/jc-gallery #5

0.34.4 → 0.34.5 Patch PR

Closed 3 months ago 1 comment

Bump the patch-updates group across 1 directory with 16 updates

C-limited/My-Fuwari-Blog #30

0.34.1 → 0.34.5 Patch PR

Closed 3 months ago 1 comment

Bump the patch-updates group across 1 directory with 16 updates

117586431/117586431.github.io #23

0.34.1 → 0.34.5 Patch PR

Open 3 months ago 2 comments

build(deps): bump the npm-production-dependencies group across 2 directories with 36 updates

laurentpf5/opentelemetry-nginx-demo #231

0.34.4 → 0.34.5 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the all group with 4 updates

bradford-tech/supabase-integrity-attest #10

0.34.3 → 0.34.5 Patch PR

Closed 3 months ago 1 comment

Bump the patch-updates group across 1 directory with 20 updates

wangai14/fuwari-main #40

0.34.2 → 0.34.5 Patch PR

Open 3 months ago 1 comment

Bump the patch-updates group across 1 directory with 23 updates

Catneko-0422/NekocatBlog #37

0.34.2 → 0.34.5 Patch PR

Open 3 months ago 2 comments

Bump the patch-updates group with 19 updates

LIUXURUXUE/Narcissus-blog #1

0.34.4 → 0.34.5 Patch PR

Closed 3 months ago 1 comment

Bump the patch-updates group across 1 directory with 21 updates

axelkenshi/blog-website #30

0.34.2 → 0.34.5 Patch PR

Closed 3 months ago 2 comments

Bump the patch-updates group across 1 directory with 19 updates

wangai14/fuwari-main #39

0.34.2 → 0.34.5 Patch PR

Open 3 months ago 1 comment

Bump the patch-updates group across 1 directory with 22 updates

axelkenshi/blog-website #29

0.34.2 → 0.34.5 Patch PR

Open 3 months ago 1 comment

Bump the patch-updates group across 1 directory with 18 updates

WangKaiCode/Blog #24

0.34.3 → 0.34.5 Patch PR

Open 3 months ago 2 comments

chore(deps): bump the dependencies group across 1 directory with 40 updates

amak07/acr-automotive #65

0.34.4 → 0.34.5 Patch PR

Open 3 months ago 1 comment

Bump the patch-updates group across 1 directory with 21 updates

Epicinver/blog #27

0.34.2 → 0.34.5 Patch PR

Closed 3 months ago 2 comments

Bump the patch-updates group across 1 directory with 18 updates

mumangguo/blog-fuwari #25

0.34.3 → 0.34.5 Patch PR

Open 3 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 34 updates

Lizard670/Infernal-Tower-405 #20

0.34.0 → 0.34.5 Patch PR

Closed 3 months ago 1 comment

chore(deps): bump the patch-updates group across 1 directory with 18 updates

PeterCatalpa/hicatalpa.cn #30

0.34.3 → 0.34.5 Patch PR

Open 3 months ago 1 comment

Bump the patch-updates group across 1 directory with 21 updates

12306le/isle #26

0.34.2 → 0.34.5 Patch PR

Open 3 months ago 2 comments

Bump the patch-updates group across 1 directory with 18 updates

359jxf/359jxf.github.io #32

0.34.3 → 0.34.5 Patch PR

Closed 3 months ago 1 comment

Package Details

Name:	`sharp`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/sharp`
JSON API:	View JSON

Security Advisories

2

Active advisories

HIGH 1

MODERATE 1

View All npm Advisories

Package Information

Description:

High performance Node.js image processing, the fastest module to resize JPEG, PNG, WebP, GIF, AVIF and TIFF images

Repository:	https://github.com/lovell/sharp
Homepage:	https://sharp.pixelplumbing.com
Latest Release:	`0.34.2` about 1 year ago
Dependent Repos:	178,353
Dependent Packages:	4,168
Downloads:	57,954,003
Ranking:	Top 0.0825% by dependent repos Top 0.0738% by downloads Top 0.0239% by dependent pkgs

PR Status

Open 17,689 (47.5%)

Merged 776 (2.1%)

Closed 15,939 (42.8%)

PR Types

Minor 7,439 (20.0%)

Patch 26,958 (72.4%)

Removal 6 (0.0%)