Generated on Nov 30, 2023 via pnpm

Npm

Home

gatsby-plugin-sharp 5.12.3

Wrapper of the Sharp image manipulation library for Gatsby plugins

gatsby

gatsby-plugin

image

sharp

Package summary

issues

licenses

Package created

6 Feb 2017

Version published

26 Oct 2023

Maintainers

Total deps

1282

Direct deps

License

MIT

Issues

1 critical severity issue

critical

linkfs@2.1.0

Package has no specified license

Recommendation: Check the package code and files for license information

via: gatsby-plugin-utils@4.12.3 & others

Collapse

Expand

15 high severity issues

high

caniuse-lite@1.0.30001565

Package uses an atypical license ("CC-BY-4.0")

Recommendation: Read and validate the license terms

via: gatsby-plugin-utils@4.12.3 & others

rc@1.2.8

Package uses a custom license expression: `(BSD-2-Clause OR MIT OR Apache-2.0)`

Recommendation: Validate that the license expression complies with your license policy

via: gatsby-plugin-utils@4.12.3 & others

babel-eslint@10.1.0

Deprecated package

via: gatsby-plugin-utils@4.12.3 & others

core-js-pure@3.33.3

Package uses postinstall script: "node -e "try{require('./postinstall')}catch(e){}""

via: gatsby-plugin-utils@4.12.3 & others

core-js@3.33.3

Package uses postinstall script: "node -e "try{require('./postinstall')}catch(e){}""

via: gatsby-plugin-utils@4.12.3 & others

es5-ext@0.10.62

Package uses postinstall script: " node -e "try{require('./_postinstall')}catch(e){}" || exit 0"

via: gatsby-plugin-utils@4.12.3 & others

gatsby-cli@5.12.4

Package uses postinstall script: "node scripts/postinstall.js"

via: gatsby-plugin-utils@4.12.3 & others

gatsby-telemetry@4.12.1

Package uses postinstall script: "node src/postinstall.js || true"

via: gatsby-plugin-utils@4.12.3 & others

gatsby@5.12.11

Package uses postinstall script: "node scripts/postinstall.js"

via: gatsby-plugin-utils@4.12.3 & others

lmdb@2.5.2

Package uses install script: "node-gyp-build-optional-packages"

via: gatsby-plugin-utils@4.12.3 & others

lmdb@2.5.3

Package uses install script: "node-gyp-build-optional-packages"

via: gatsby-core-utils@4.12.1 & others

msgpackr-extract@3.0.2

Package uses install script: "node-gyp-build-optional-packages"

via: gatsby-core-utils@4.12.1 & others

sharp@0.32.6

Package uses install script: "(node install/libvips && node install/dll-copy && prebuild-install) || (node install/can-compile && node-gyp rebuild && node install/dll-copy)"

via: gatsby-plugin-utils@4.12.3 & others

stable@0.1.8

Deprecated package

via: gatsby-plugin-utils@4.12.3 & others

string-similarity@1.2.2

Deprecated package

via: gatsby-plugin-utils@4.12.3 & others

Collapse

Expand

7 moderate severity issues

moderate

axios@0.21.4

Axios Cross-Site Request Forgery Vulnerability

Recommendation: Upgrade to version 1.6.0 or later

via: gatsby-plugin-utils@4.12.3 & others

axe-core@4.7.0

Package uses a problematic Weakly Protective license ("MPL-2.0")

Recommendation: Validate that the package complies with your license policy

via: gatsby-plugin-utils@4.12.3 & others

@nicolo-ribaudo/eslint-scope-5-internals@5.1.1-v1

Package has no specified source code repository

via: gatsby-plugin-utils@4.12.3 & others

babel-jsx-utils@1.1.0

Package has no specified source code repository

via: gatsby-plugin-utils@4.12.3 & others

dotenv-expand@5.1.0

Package has no specified source code repository

via: gatsby-plugin-utils@4.12.3 & others

physical-cpu-count@2.0.0

Package has no specified source code repository

via: gatsby-plugin-utils@4.12.3 & others

signedsource@1.0.0

Package has no specified source code repository

via: gatsby-plugin-utils@4.12.3 & others

Collapse

Expand

3 low severity issues

low

language-subtag-registry@0.3.22

Package uses a license that is not OSI approved ("CC0-1.0")

Recommendation: Read and validate the license terms

via: gatsby-plugin-utils@4.12.3 & others

mdn-data@2.0.14

Package uses a license that is not OSI approved ("CC0-1.0")

Recommendation: Read and validate the license terms

via: gatsby-plugin-utils@4.12.3 & others

caniuse-lite@1.0.30001565

Package uses a license that is not OSI approved ("CC-BY-4.0")

Recommendation: Read and validate the license terms

via: gatsby-plugin-utils@4.12.3 & others

Collapse

Expand

Licenses

MIT License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

Cannot

hold-liable

Must

include-copyright

include-license

1116 Packages, Including:

@aashutoshrathi/word-wrap@1.2.6

@ardatan/relay-compiler@12.0.0

@babel/code-frame@7.12.11

@babel/code-frame@7.23.5

@babel/compat-data@7.23.5

@babel/core@7.23.5

@babel/eslint-parser@7.23.3

@babel/generator@7.23.5

@babel/helper-annotate-as-pure@7.22.5

@babel/helper-builder-binary-assignment-operator-visitor@7.22.15

@babel/helper-compilation-targets@7.22.15

@babel/helper-create-class-features-plugin@7.23.5

@babel/helper-create-regexp-features-plugin@7.22.15

@babel/helper-define-polyfill-provider@0.4.3

@babel/helper-environment-visitor@7.22.20

@babel/helper-function-name@7.23.0

@babel/helper-hoist-variables@7.22.5

@babel/helper-member-expression-to-functions@7.23.0

@babel/helper-module-imports@7.22.15

@babel/helper-module-transforms@7.23.3

@babel/helper-optimise-call-expression@7.22.5

@babel/helper-plugin-utils@7.22.5

@babel/helper-remap-async-to-generator@7.22.20

@babel/helper-replace-supers@7.22.20

@babel/helper-simple-access@7.22.5

@babel/helper-skip-transparent-expression-wrappers@7.22.5

@babel/helper-split-export-declaration@7.22.6

@babel/helper-string-parser@7.23.4

@babel/helper-validator-identifier@7.22.20

@babel/helper-validator-option@7.23.5

@babel/helper-wrap-function@7.22.20

@babel/helpers@7.23.5

@babel/highlight@7.23.4

@babel/parser@7.23.5

@babel/plugin-bugfix-safari-id-destructuring-collision-in-function-expression@7.23.3

@babel/plugin-bugfix-v8-spread-parameters-in-optional-chaining@7.23.3

@babel/plugin-bugfix-v8-static-class-fields-redefine-readonly@7.23.3

@babel/plugin-proposal-class-properties@7.18.6

@babel/plugin-proposal-nullish-coalescing-operator@7.18.6

@babel/plugin-proposal-numeric-separator@7.18.6

@babel/plugin-proposal-object-rest-spread@7.20.7

@babel/plugin-proposal-optional-chaining@7.21.0

@babel/plugin-proposal-private-property-in-object@7.21.0-placeholder-for-preset-env.2

@babel/plugin-syntax-async-generators@7.8.4

@babel/plugin-syntax-class-properties@7.12.13

@babel/plugin-syntax-class-static-block@7.14.5

@babel/plugin-syntax-dynamic-import@7.8.3

@babel/plugin-syntax-export-namespace-from@7.8.3

@babel/plugin-syntax-flow@7.23.3

@babel/plugin-syntax-import-assertions@7.23.3

ISC License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

Cannot

hold-liable

Must

include-copyright

include-license

75 Packages, Including:

@trysound/sax@0.2.0

ansi-align@3.0.1

anymatch@3.1.3

at-least-node@1.0.0

b4a@1.6.4

boolbase@1.0.0

chownr@1.1.4

cli-width@3.0.0

cliui@6.0.0

common-path-prefix@3.0.0

css-declaration-sorter@6.4.1

d@1.0.1

electron-to-chromium@1.4.597

es5-ext@0.10.62

es6-symbol@3.1.3

es6-weak-map@2.0.3

ext@1.7.0

fastq@1.15.0

flatted@3.2.9

fs-exists-cached@1.0.0

fs.realpath@1.0.0

get-caller-file@2.0.5

glob-parent@5.1.2

glob@7.2.3

graceful-fs@4.2.10

graceful-fs@4.2.11

hosted-git-info@3.0.8

icss-utils@5.1.0

inflight@1.0.6

inherits@2.0.4

ini@1.3.8

isexe@2.0.0

lru-cache@4.0.0

lru-cache@5.1.1

lru-cache@6.0.0

memoizee@0.4.15

minimatch@3.1.2

mute-stream@0.0.8

next-tick@1.1.0

once@1.4.0

physical-cpu-count@2.0.0

picocolors@1.0.0

postcss-modules-extract-imports@3.0.0

postcss-modules-scope@3.0.0

postcss-modules-values@4.0.0

proto-list@1.2.4

pseudomap@1.0.2

read@1.0.7

remove-trailing-separator@1.1.0

require-main-filename@2.0.0

BSD 2-Clause "Simplified" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

hold-liable

Must

include-copyright

include-license

28 Packages, Including:

@typescript-eslint/parser@5.62.0

@typescript-eslint/typescript-estree@5.62.0

configstore@5.0.1

css-select@4.3.0

css-what@6.1.0

damerau-levenshtein@1.0.8

domelementtype@2.3.0

domhandler@4.3.1

domutils@2.8.0

dotenv-expand@5.1.0

dotenv@7.0.0

dotenv@8.6.0

entities@2.2.0

eslint-scope@5.1.1

espree@7.3.1

esprima@4.0.1

esrecurse@4.3.0

estraverse@4.3.0

estraverse@5.3.0

esutils@2.0.3

glob-to-regexp@0.4.1

http-cache-semantics@4.1.1

nth-check@2.1.1

regjsparser@0.9.1

terser@5.24.0

uri-js@4.4.1

webidl-conversions@3.0.1

yurnalist@2.1.0

Apache License 2.0

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

use-patent-claims

place-warranty

Cannot

hold-liable

use-trademark

Must

include-copyright

include-license

state-changes

include-notice

24 Packages, Including:

@ampproject/remapping@2.2.1

@humanwhocodes/config-array@0.5.0

@swc/helpers@0.4.36

@webassemblyjs/leb128@1.11.6

@xtuc/long@4.2.2

ansi-html-community@0.0.8

aria-query@5.3.0

axobject-query@3.2.1

bser@2.1.1

detect-libc@1.0.3

detect-libc@2.0.2

doctrine@2.1.0

doctrine@3.0.0

eslint-visitor-keys@1.3.0

eslint-visitor-keys@2.1.0

eslint-visitor-keys@3.4.3

fb-watchman@2.0.2

human-signals@2.1.0

opentracing@0.14.7

rxjs@6.6.7

sharp@0.32.6

true-case-path@2.2.1

tunnel-agent@0.6.0

typescript@5.3.2

BSD 3-Clause "New" or "Revised" License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

place-warranty

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

23 Packages, Including:

@hapi/hoek@9.3.0

@hapi/topo@5.1.0

@humanwhocodes/object-schema@1.2.1

@sideway/address@4.1.4

@sideway/formula@3.0.1

@sideway/pinpoint@2.0.0

@xtuc/ieee754@1.2.0

eslint-plugin-flowtype@5.10.0

esquery@1.5.0

filesize@8.0.7

flat@5.0.2

ieee754@1.2.1

immutable@3.7.6

joi@17.11.0

qs@6.11.0

serialize-javascript@5.0.1

serialize-javascript@6.0.1

signedsource@1.0.0

source-map-js@1.0.2

source-map@0.6.1

source-map@0.7.4

sprintf-js@1.0.3

table@6.8.1

BSD Zero Clause License

Permissive

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

private-use

include-copyright

include-license

include-original

Cannot

hold-liable

Must

4 Packages, Including:

password-prompt@1.1.3

tslib@1.14.1

tslib@2.4.1

tslib@2.6.2

(MIT OR CC0-1.0)

Public Domain

3 Packages, Including:

type-fest@0.20.2

type-fest@0.21.3

type-fest@0.8.1

The Unlicense

Public Domain

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

private-use

modify

Cannot

include-copyright

hold-liable

Must

2 Packages, Including:

fs-monkey@1.0.5

memfs@3.5.3

Creative Commons Zero v1.0 Universal

Public Domain

Not OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

Cannot

Must

2 Packages, Including:

language-subtag-registry@0.3.22

mdn-data@2.0.14

Mozilla Public License 2.0

Weakly Protective

OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

commercial-use

modify

distribute

sublicense

place-warranty

use-patent-claims

Cannot

use-trademark

hold-liable

Must

include-copyright

include-license

disclose-source

include-original

1 Packages, Including:

axe-core@4.7.0

Creative Commons Attribution 4.0 International

Uncategorized

Not OSI Approved

This is a human-readable summary of (and not a substitute for) the license. Disclaimer.

Can

Cannot

Must

1 Packages, Including:

caniuse-lite@1.0.30001565

(MIT OR WTFPL)

Permissive

1 Packages, Including:

expand-template@2.0.3

N/A

1 Packages, Including:

linkfs@2.1.0

(BSD-2-Clause OR MIT OR Apache-2.0)

Expression

1 Packages, Including:

rc@1.2.8

Direct Dependencies

All Dependencies CSV

ⓘ This is a list of gatsby-plugin-sharp 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.

Name	Version	Size	License	Type	Vulnerabilities
@babel/runtime	7.23.5	51.63 kB	MIT	prod
async	3.2.5	146.47 kB	MIT	prod
bluebird	3.7.2	136.03 kB	MIT	prod
debug	4.3.4	12.94 kB	MIT	prod
filenamify	4.3.0	2.98 kB	MIT	prod
fs-extra	11.2.0	14.91 kB	MIT	prod
gatsby-core-utils	4.12.1	45.31 kB	MIT	prod	2
gatsby-plugin-utils	4.12.3	46.21 kB	MIT	prod	1 15 7 3
gatsby	5.12.11	1.71 MB	MIT	prod peer	1 15 7 3
lodash	4.17.21	311.49 kB	MIT	prod
probe-image-size	7.2.3	16.97 kB	MIT	prod
semver	7.5.4	26.25 kB	ISC	prod
sharp	0.32.6	120.91 kB	Apache-2.0	prod	2