`sharp`

Ecosystem:
npm

Package URL:
pkg:npm/sharp

Total PRs:
37,255 Dependabot PRs

Latest PR:
about 2 hours ago

Unique Repositories:
7,560 repositories

Unique Repos (30 days):
108 repositories

Security Advisories

sharp vulnerability in libwebp dependency CVE-2023-4863

GHSA-54xq-cgqr-rpm3 HIGH published over 2 years ago • updated about 5 hours ago

## Overview sharp uses libwebp to decode WebP images and versions prior to the latest 0.32.6 are vulnerable to the high severity https://github.co...

sharp vulnerable to Command Injection in post-installation over build environment

GHSA-gp95-ppv5-3jc5 CVE-2022-29256 MODERATE published about 4 years ago • updated 3 days ago

There's a possible vulnerability in logic that is run only at `npm install` time when installing versions of `sharp` prior to the latest v0.30.5. ...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

chore(deps): bump the production-dependencies group across 1 directory with 30 updates

Kinsliner/quartz #13

0.34.3 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 31 updates

trYYNNN/mental-gymnastics #23

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 1 comment

Bump the production-dependencies group across 1 directory with 31 updates

phanerka/rw-modding-link-stash-web #27

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 1 comment

Bump the production-dependencies group across 1 directory with 31 updates

bebhuvan/alittlelessdumb #20

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 2 comments

chore(deps): bump the production-dependencies group across 1 directory with 31 updates

onmorii/obsideantest #23

0.34.3 → 0.34.5 Patch PR

Open 4 months ago 1 comment

build(deps): bump the production-dependencies group across 1 directory with 31 updates

cedbo26/pestalozzi-intranet #17

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 25 updates

Spute/quartz-blog #15

0.34.4 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 27 updates

Laborian-Oli/My-Quartz #20

0.34.3 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 25 updates

rishSubra/portfolio #13

0.34.4 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 31 updates

cagdasmetin/haggadah #22

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 1 comment

Bump the production-dependencies group across 1 directory with 31 updates

HOrdover/craftlit-moby #20

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 1 comment

Bump the patch-updates group with 15 updates

qtit07/qtit07.github.io #16

0.34.1 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 31 updates

NSHTghattas/Quartz-Sira #9

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 31 updates

lnsjhnssn/quartz-garden #22

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 31 updates

dougrosman/dougrosmanteaching #22

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 31 updates

lilbitty007/quartz #22

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 1 comment

build(deps): bump the production-dependencies group across 1 directory with 30 updates

alemsabic/alems-site #8

0.34.3 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 31 updates

Yohanes-Fikru/MajorJohn #22

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 31 updates

kvnlabs/Nodes #55

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 1 comment

Bump the production-dependencies group across 1 directory with 32 updates

Marcejr117/Hacking-Notes-Writeups #47

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 1 comment

build(deps): bump the production-dependencies group across 1 directory with 31 updates

royhananwar/ranwar #20

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 31 updates

p-cn/cnkp #20

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 35 updates

SteveDockar/std-ha-notthe-blog #38

0.34.1 → 0.34.5 Patch PR

Open 4 months ago 1 comment

Bump the production-dependencies group across 1 directory with 31 updates

scriptor-pro/jndjs #24

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 27 updates

DaanGr/FactoryOfTheFuture.Portfolio #23

0.34.3 → 0.34.5 Patch PR

Open 4 months ago 1 comment

Bump the production-dependencies group across 1 directory with 31 updates

jju00/blog #24

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 1 comment

Bump the production-dependencies group across 1 directory with 31 updates

lazetornado/Boomie-s-Garden #23

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 25 updates

Mahironthedaydreamer/quartz-site #12

0.34.4 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 31 updates

CaptainBrainCell/quartz #24

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 28 updates

paultibe/digital-garden #19

0.34.3 → 0.34.5 Patch PR

Open 4 months ago 1 comment

Bump the production-dependencies group across 1 directory with 34 updates

Hacgo/obsidian_blog #28

0.34.1 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 34 updates

wonswe/won-blog #28

0.34.1 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 34 updates

aashish-mehta/knowledge-host #28

0.34.1 → 0.34.5 Patch PR

Open 4 months ago 1 comment

Bump the production-dependencies group across 1 directory with 25 updates

abu0010/quartzvercel #10

0.34.4 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 31 updates

hoaianthai345/AIO-Blog #27

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 30 updates

PaienNate/MyDigitalGarden #20

0.34.3 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 30 updates

Suede0619/psychedelic #23

0.34.3 → 0.34.5 Patch PR

Open 4 months ago 1 comment

build(deps): bump the production-dependencies group across 1 directory with 35 updates

shk2000v/shk_blog #30

0.34.1 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 30 updates

miztroh/jonathan.teamcox.family #22

0.34.3 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 30 updates

glaubius/recipes #24

0.34.3 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 28 updates

Alan-JH/alanjh-quartz-website #19

0.34.3 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 34 updates

mwmcnall/wes-is-learning-in-public #31

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 31 updates

January2003/quartz-blog #23

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 24 updates

axiomcoder/axelsimms.com #22

0.34.4 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 31 updates

cl9ff/quartz-notes #22

0.34.2 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps-dev): bump the development-dependencies group across 1 directory with 27 updates

Sskutushev/MyPortfolio #25

0.34.4 → 0.34.5 Patch PR

Open 4 months ago 2 comments

chore(deps): bump the production-dependencies group across 1 directory with 30 updates

Inceid/acts #20

0.34.3 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 25 updates

x-sushant-x/site #13

0.34.4 → 0.34.5 Patch PR

Open 4 months ago 1 comment

Bump the production-dependencies group across 1 directory with 25 updates

koblade009/quartz-k9 #13

0.34.4 → 0.34.5 Patch PR

Open 4 months ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 34 updates

amo-om/kuteta-web #27

0.34.1 → 0.34.5 Patch PR

Open 4 months ago 1 comment

Package Details

Name:	`sharp`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/sharp`
JSON API:	View JSON

Security Advisories

2

Active advisories

HIGH 1

MODERATE 1

View All npm Advisories

Package Information

Description:

High performance Node.js image processing, the fastest module to resize JPEG, PNG, WebP, GIF, AVIF and TIFF images

Repository:	https://github.com/lovell/sharp
Homepage:	https://sharp.pixelplumbing.com
Latest Release:	`0.34.2` about 1 year ago
Dependent Repos:	178,353
Dependent Packages:	4,168
Downloads:	57,954,003
Ranking:	Top 0.0825% by dependent repos Top 0.0738% by downloads Top 0.0239% by dependent pkgs

PR Status

Open 17,696 (47.5%)

Merged 776 (2.1%)

Closed 15,947 (42.8%)

PR Types

Minor 7,453 (20.0%)

Patch 26,959 (72.4%)

Removal 6 (0.0%)