search

lokesh / color-thief

Grab the color palette from an image using just Javascript. Works in the browser and in Node.
https://lokeshdhakar.com/projects/color-thief/
MIT License
12.67k stars 1.31k forks source link

update 'get-pixels' dep to use package 'get-pixels-updated' without … #204

Closed chandern closed 1 year ago

chandern commented 3 years ago

…vulnerability

Using updated version of get-pixels as there is a security vulnerability in it. See: https://www.npmjs.com/package/get-pixels-updated https://nvd.nist.gov/vuln/detail/CVE-2020-8175

lokesh commented 1 year ago

This issue was eventually resolved by the get-pixels package itself: https://github.com/scijs/get-pixels/commit/35138410870f7f031c6566feb886c7ed773ecb3c

👍