`sharp`

Ecosystem:
npm

Package URL:
pkg:npm/sharp

Total PRs:
37,254 Dependabot PRs

Latest PR:
about 4 hours ago

Unique Repositories:
7,559 repositories

Unique Repos (30 days):
108 repositories

Security Advisories

sharp vulnerability in libwebp dependency CVE-2023-4863

GHSA-54xq-cgqr-rpm3 HIGH published over 2 years ago • updated about 4 hours ago

## Overview sharp uses libwebp to decode WebP images and versions prior to the latest 0.32.6 are vulnerable to the high severity https://github.co...

sharp vulnerable to Command Injection in post-installation over build environment

GHSA-gp95-ppv5-3jc5 CVE-2022-29256 MODERATE published about 4 years ago • updated 2 days ago

There's a possible vulnerability in logic that is run only at `npm install` time when installing versions of `sharp` prior to the latest v0.30.5. ...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

Bump the patch-updates group across 1 directory with 16 updates

VRedQueen/vredqueen.github.io #30

0.34.3 → 0.34.5 Patch PR

Closed 4 months ago 1 comment

Bump the patch-updates group across 1 directory with 16 updates

michalpawouk/blog #29

0.34.3 → 0.34.5 Patch PR

Closed 4 months ago 1 comment

Bump the patch-updates group across 1 directory with 19 updates

12306le/isle #24

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 2 comments

chore(deps): bump the patch-updates group across 1 directory with 14 updates

bbcslook-beep/my-website #11

0.34.4 → 0.34.5 Patch PR

Open 4 months ago 2 comments

Bump the patch-updates group across 1 directory with 16 updates

So1jonismatov/The_Vault #26

0.34.3 → 0.34.5 Patch PR

Closed 4 months ago 1 comment

Bump the patch-updates group across 1 directory with 16 updates

jellyrain/RainBlog #22

0.34.3 → 0.34.5 Patch PR

Closed 4 months ago 2 comments

Bump the patch-updates group across 1 directory with 16 updates

soufzero1999/myblognoice #20

0.34.1 → 0.34.5 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump the patch-updates group across 1 directory with 15 updates

Ali-Umed/my-portfolio #35

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 1 comment

build(deps): bump the patch-updates group across 1 directory with 18 updates

yanyueyaer/blog #20

0.34.3 → 0.34.5 Patch PR

Open 4 months ago 3 comments

Bump the patch-updates group across 1 directory with 16 updates

SkAsmaJabeen/myblog #18

0.34.3 → 0.34.5 Patch PR

Closed 4 months ago 1 comment

Bump the patch-updates group across 1 directory with 20 updates

Infinitas001/Itas.github.io #15

0.34.3 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the patch-updates group across 1 directory with 19 updates

liuc-c/blog #29

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 2 comments

Bump the patch-updates group across 1 directory with 17 updates

bacardi-rum/gorgeous-onion #26

0.34.1 → 0.34.5 Patch PR

Closed 4 months ago 1 comment

build(deps): bump the patch-updates group across 1 directory with 21 updates

Anticupid51/Antcupids-Site #15

0.34.3 → 0.34.5 Patch PR

Open 4 months ago 1 comment

Bump the patch-updates group across 1 directory with 16 updates

Benzee10/Shinydollop #22

0.34.3 → 0.34.5 Patch PR

Closed 4 months ago 2 comments

chore(deps): bump the patch-updates group across 1 directory with 14 updates

MoeMengMoe/My-Blog #10

0.34.4 → 0.34.5 Patch PR

Open 4 months ago 2 comments

chore(deps): bump the patch-updates group across 1 directory with 18 updates

zhyeeh/zhyeeh.github.io #26

0.34.2 → 0.34.5 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 28 updates

reletz/sys #6

0.34.3 → 0.34.5 Patch PR

Open 4 months ago 1 comment

Bump the all-dependencies group with 4 updates

mitchellfyi/mitchellbryson.com #21

0.34.3 → 0.34.5 Patch PR

Open 4 months ago 1 comment

deps(deps): bump the minor-patch group with 69 updates

ampersands-ai/mymedia-studio #4

0.34.4 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 25 updates

vibl/reasonance.cc #6

0.34.4 → 0.34.5 Patch PR

Open 4 months ago 1 comment

build(deps): bump the production-dependencies group across 1 directory with 55 updates

1ih29c2002-max/ruknyio #10

0.34.4 → 0.34.5 Patch PR

Closed 4 months ago 2 comments

chore(deps): bump the production-dependencies group across 1 directory with 31 updates

proxylivy/quartz-notes #62

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 2 comments

Bump the production-dependencies group across 1 directory with 31 updates

craftsmandigital/quartz-how-to-do-stuff #18

0.34.3 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 34 updates

Yarmoon/phoenix-wiki #30

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 28 updates

shinjay7/my-blog #19

0.34.3 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 34 updates

eushaun/obsidian-quartz-website #27

0.34.1 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 30 updates

yswa-var/obsi-m1 #20

0.34.3 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 31 updates

besthappy/blog-public #21

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 1 comment

Bump the production-dependencies group across 1 directory with 33 updates

hionpu/obsidianQuartz #43

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 30 updates

royalsinger/coolwebsite #21

0.34.3 → 0.34.5 Patch PR

Open 4 months ago 1 comment

Bump the production-dependencies group across 1 directory with 35 updates

sebzuddas/wiki #27

0.34.1 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 23 updates

Rayme/quartz #38

0.34.4 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 31 updates

Kilka-Kel/Denver_by_Night #20

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 2 comments

Bump the all group across 1 directory with 191 updates

aj-seven/ai-hub #30

0.34.4 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 33 updates

narharim/narhari.dev #32

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 1 comment

Bump the production-dependencies group across 1 directory with 30 updates

mjf1406/classclarus-resources #20

0.34.3 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 34 updates

GregMullinn/Blog #26

0.34.1 → 0.34.5 Patch PR

Open 4 months ago 3 comments

chore(deps): bump the production-dependencies group across 1 directory with 31 updates

zvdxc/julisite #18

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 31 updates

youaremyrival/druptur-wiki #27

0.34.2 → 0.34.5 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 30 updates

mayameowmeow/mayas-home #23

0.34.3 → 0.34.5 Patch PR

Open 4 months ago 1 comment

Bump the production-dependencies group across 1 directory with 24 updates

ziwonmoon/ai-knowledge-vault #11

0.34.4 → 0.34.5 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 31 updates

Davippi/PSAHandbook #22

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 31 updates

p-cn/pt1 #21

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 1 comment

Bump the production-dependencies group across 1 directory with 31 updates

Gitnapp/Gitnapp.github.io #22

0.34.2 → 0.34.5 Patch PR

Closed 4 months ago 1 comment

Bump the production-dependencies group across 1 directory with 25 updates

PaulNina/bitacora-obras #12

0.34.4 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 28 updates

jschwabacher/wp-library #17

0.34.3 → 0.34.5 Patch PR

Open 4 months ago 1 comment

Bump the production-dependencies group across 1 directory with 31 updates

ParkJaeHan0623/SecondBrain #21

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 32 updates

jonsonw/codesindex #34

0.34.3 → 0.34.5 Patch PR

Open 4 months ago 1 comment

Bump the production-dependencies group across 1 directory with 30 updates

HIHello0/Notes27-08-25 #19

0.34.3 → 0.34.5 Patch PR

Open 4 months ago 1 comment

Package Details

Name:	`sharp`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/sharp`
JSON API:	View JSON

Security Advisories

2

Active advisories

HIGH 1

MODERATE 1

View All npm Advisories

Package Information

Description:

High performance Node.js image processing, the fastest module to resize JPEG, PNG, WebP, GIF, AVIF and TIFF images

Repository:	https://github.com/lovell/sharp
Homepage:	https://sharp.pixelplumbing.com
Latest Release:	`0.34.2` about 1 year ago
Dependent Repos:	178,353
Dependent Packages:	4,168
Downloads:	57,954,003
Ranking:	Top 0.0825% by dependent repos Top 0.0738% by downloads Top 0.0239% by dependent pkgs

PR Status

Open 17,696 (47.5%)

Merged 776 (2.1%)

Closed 15,947 (42.8%)

PR Types

Minor 7,453 (20.0%)

Patch 26,959 (72.4%)

Removal 6 (0.0%)