Package Health Score

47 / 100

security
No known security issues
popularity
Recognized
maintenance
Inactive
community
Limited

Security

No known security issues

All security vulnerabilities belong to production dependencies of direct and indirect packages.

Security and license risk for significant versions

Version				Vulnerabilities	License Risk
0.1.6	\|	05/2020	Popular	0 C 0 H 0 M 0 L	1 H 0 M 0 L

License

MPL-2.0

Non-Permissive License

We noticed that this project uses a license which requires less permissive conditions such as disclosing the source code, stating changes or redistributing the source under the same license. It is advised to further consult the license terms before use.

Security Policy

Is your project affected by vulnerabilities?

Scan your projects for vulnerabilities. Fix quickly with automated fixes. Get started with Snyk for free.

Get started free

Popularity

Recognized

Weekly Downloads (21,881)

GitHub Stars: 3
Forks: 2
Contributors: 1

Direct Usage Popularity

The npm package ico-endec receives a total of 21,881 downloads a week. As such, we scored ico-endec popularity level to be Recognized.

Based on project statistics from the GitHub repository for the npm package ico-endec, we found that it has been starred 3 times.

Downloads are calculated as moving averages for a period of the last 12 months, excluding weekends and known missing data points.

Community

Limited

Readme.md: Yes
Contributing.md: No
Code of Conduct: No
Contributors: 1
Funding: No

This project has seen only 10 or less contributors.

We found a way for you to contribute to the project! Looks like ico-endec is missing a Code of Conduct.

Embed Package Health Score Badge

Maintenance

Inactive

Commit Frequency

No Recent Commits

Open Issues: 1
Open PR: 6
Last Release: 4 years ago
Last Commit: 4 years ago

Further analysis of the maintenance status of ico-endec based on released npm versions cadence, the repository activity, and other data points determined that its maintenance is Inactive.

An important project maintenance signal to consider for ico-endec is that it hasn't seen any new versions released to npm in the past 12 months, and could be considered as a discontinued project, or that which receives low attention from its maintainers.

In the past month we didn't find any pull request activity or change in issues status has been detected for the GitHub repository.

Keep your project healthy

Check your package.json

Ensure all the packages you're using are healthy and well-maintained

Snyk Vulnerability Scanner

Get health score & security insights directly in your IDE

Package

Node.js Compatibility: not defined

Age: 5 years
Dependencies: 0 Direct
Versions: 8
Install Size: 26.3 kB
Dist-tags: 1
# of Files: 4
Maintainers: 1
TS Typings: No

ico-endec has more than a single and default latest tag published for the npm package. This means, there may be other tags available for this package, such as next to indicate future releases, or stable to indicate stable releases.

Readme

ICO encoder & decoder

This JavaScript library provides an encoder and decoder for ICO and CUR files. Although this library can encode and decode both BMP and PNG images, BMP endec does not provide bitmasking support, and as such, will not work with some icons. However, PNG support is widespread and has become a more defacto standard for application icons, so this problem is largely moot -- but it still would be nice to have.

Encoding

icoEndec.encode([Buffer||ArrayBuffer])

The encode function takes an array of ArrayBuffers or Buffers that contain BMP or PNG data. It returns a Buffer containing the binary data of the ICO file.

Example

const icoEndec   = require('ico-endec')
const fsPromises = require('fs').Promises

(async () => {
  let icoBuffer = icoEndec.encode([
    await fsPromises.readFile('myIcon-16x16.png'),
    await fsPromises.readFile('myIcon-32x32.png'),
    await fsPromises.readFile('myIcon-64x64.png')
  ])
  
  await fsPromises.writeFile('myIcon.ico', icoBuffer)
})()

Decoding

icoEndec.decode(Buffer)

The decode function takes a Buffer or an ArrayBuffer that holds the binary data of an ICO file. It returns an array of IconEntries.

Example

const icoEndec   = require('ico-endec')
const fsPromises = require('fs').Promises

(async () => {
  let icons = icoEndec.decode(await fsPromises.readFile('myIcon.ico'))
  
  icons.forEach((icon, index) => {
    fsPromises.writeFile(`myIcon-${icon.width}x${icon.height}.${icon.imageType}`, icon.imageData)
  })
})()

IconEntry

The IconEntry class stores various information about the given icon entry.

Accessor	Type	Description
width	Number	width of the image, maximum of 256
height	Number	height of the image, maximum of 256
colors	Number	number of colors
colorPlanes	Number	color planes of an ICO image
bitsPerPixel	Number	bits per pixel of an ICO image
horizontalHotspot	Number	horizontal hotspot of a CUR image
verticalHotspot	Number	vertical hotspot of a CUR image
imageSize	Number	(interal) size of imageData's buffer
imageOffset	Number	(interal) offset start of the image data
imageType	String	'png' or 'bmp'
imageData	Buffer	image data of the icon

ico-endec development dependencies

minimist rollup rollup-plugin-license rollup-plugin-terser

FAQs

What is ico-endec?

ICO encoder and decoder library. Visit Snyk Advisor to see a full health score report for ico-endec, including popularity, security, maintenance & community analysis.

Is ico-endec popular?

The npm package ico-endec receives a total of 21,881 weekly downloads. As such, ico-endec popularity was classified as a recognized. Visit the popularity section on Snyk Advisor to see the full health analysis.

Is ico-endec well maintained?

We found indications that ico-endec is an Inactive project. See the full package health analysis to learn more about the package maintenance status.

Is ico-endec safe to use?

The npm package ico-endec was scanned for known vulnerabilities and missing license, and no issues were found. Thus the package was deemed as safe to use. See the full health analysis review.

Last updated on 9 November-2024, at 01:06 (UTC).

Build a secure application checklist

Select a recommended open source package

Minimize your risk by selecting secure & well maintained open source packages

DONE

Scan your app for vulnerabilities

Scan your application to find vulnerabilities in your: source code, open source dependencies, containers and configuration files

SCAN NOW

Fix identified vulnerabilities

Easily fix your code by leveraging automatically generated PRs

AUTO FIX

Monitor for new issues

New vulnerabilities are discovered every day. Get notified if your application is affected

MONITOR APP

ico-endec

ICO encoder and decoder library For more information about how to use this package see README

Ensure you're using the healthiest npm packages

Package Health Score

Security

Security and license risk for significant versions

Non-Permissive License

Is your project affected by vulnerabilities?

Popularity

Weekly Downloads (21,881)

Direct Usage Popularity

Community

Embed Package Health Score Badge

Maintenance

Commit Frequency

Keep your project healthy

Check your package.json

Snyk Vulnerability Scanner

Package

Readme

ICO encoder & decoder

Encoding

icoEndec.encode([Buffer||ArrayBuffer])

Example

Decoding

icoEndec.decode(Buffer)

Example

IconEntry

ico-endec development dependencies

FAQs

What is ico-endec?

Is ico-endec popular?

Is ico-endec well maintained?

Is ico-endec safe to use?

Build a secure application checklist

Select a recommended open source package

Scan your app for vulnerabilities

Fix identified vulnerabilities

Monitor for new issues

Package Health Score

Security and license risk for significant versions

Is your project affected by vulnerabilities?

Weekly Downloads (21,881)

Direct Usage Popularity

Embed Package Health Score Badge

Commit Frequency

Keep your project healthy

Check your package.json

Snyk Vulnerability Scanner

Readme

ICO encoder & decoder

Encoding

icoEndec.encode([Buffer||ArrayBuffer])

Example

Decoding

icoEndec.decode(Buffer)

Example

IconEntry

ico-endec development dependencies

FAQs

What is ico-endec?

Is ico-endec popular?

Is ico-endec well maintained?

Is ico-endec safe to use?

Build a secure application checklist

Select a recommended open source package

Scan your app for vulnerabilities

Source Code

Open Source

Container

Config

Fix identified vulnerabilities

Monitor for new issues