registry / easypng / 1.2.0

easypng@1.2.0

Compress and convert PNG, JPEG, WebP, and AVIF images from the command line or as a Node library, the CLI companion to EasyPNG (https://amanghuman.com/easypng.html). Uses mozjpeg, pngquant-style palette quantization, libwebp, and libavif under the hood vi

Static Scan Results

scanned 6h ago · by rust-scanner

Static analysis flagged 5 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

Filesystem

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 22.4 KB of source, external domains: amanghuman.com

Source & flagged code

1 flagged

bin/easypng.jsView file

Lines 235-275javascript

235 },

236 }));

237 } catch (err) {

238 console.error(`easypng: ${err.message}`);

239 process.exit(1);

240 }

241

242 if (values.version) {

243 console.log(VERSION);

244 return;

245 }

246 if (values.help) {

247 printHelp();

248 return;

249 }

250 if (positionals.length === 0) {

251 printHelp();

252 process.exit(1);

253 }

254

255 try {

256 require('sharp');

257 } catch (err) {

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

bin/easypng.jsView on unpkg · L255

258 console.error('easypng: the "sharp" dependency is not installed. Run `npm install` in this package first.');

259 process.exit(1);

260 }

261

262 const format = values.format;

263 if (!lib.FORMATS.includes(format)) {

264 console.error(`easypng: invalid --format "${format}". Use png, jpeg, webp, avif, or original.`);

265 process.exit(1);

266 }

267 const quality = Math.max(1, Math.min(100, parseInt(values.quality, 10) || 75));

268 const colors = Math.max(0, Math.min(256, parseInt(values.colors, 10)));

269 const targetSizeKb = values['target-size'] ? parseFloat(values['target-size']) : null;

270 const maxSizeKb = values['max-size'] ? parseFloat(values['max-size']) : null;

271 const concurrency = values.concurrency ? parseInt(values.concurrency, 10) : undefined;

272 let resize, maxSizeExceptions;

273 try {

274 resize = lib.parseResize(values.resize);

275 maxSizeExceptions = parseMaxSizeExceptions(values['max-size-except']);

Source & flagged code

1 flagged · loading source

bin/easypng.jsView file

255package = easypng; repositoryIdentity = amanghuman; dependency = sharp L255: try { L256: require('sharp'); L257: } catch (err) {

High

Copied Package Dependency Bridge

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code