{"id":1861778,"name":"imageoptim","ecosystem":"npm","description":"Node.js wrapper for some images compression algorithms","homepage":"https://github.com/bem/image-optim","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/bem/image-optim","keywords_array":["optimizer","image","image optim","image optimizer","lint","linter","image lint","image linter"],"namespace":null,"versions_count":12,"first_release_published_at":"2015-02-02T22:12:24.445Z","latest_release_published_at":"2018-03-05T09:48:10.772Z","latest_release_number":"0.5.0","last_synced_at":"2026-08-16T03:24:25.076Z","created_at":"2022-04-09T17:33:59.415Z","updated_at":"2026-08-16T13:24:19.100Z","registry_url":"https://www.npmjs.com/package/imageoptim","install_command":"npm install imageoptim","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"0.5.0"},"contentPolicy":null},"repo_metadata":{"id":26288079,"uuid":"29735751","full_name":"bem-archive/image-optim","owner":"bem-archive","description":"Node.js wrapper for image compression algorithms","archived":false,"fork":false,"pushed_at":"2018-03-05T09:47:54.000Z","size":2452,"stargazers_count":32,"open_issues_count":7,"forks_count":6,"subscribers_count":6,"default_branch":"master","last_synced_at":"2026-08-09T18:22:31.536Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/bem-archive.png","metadata":{},"created_at":"2015-01-23T14:23:55.000Z","updated_at":"2024-11-27T06:54:31.000Z","dependencies_parsed_at":"2022-09-15T01:01:55.901Z","dependency_job_id":null,"html_url":"https://github.com/bem-archive/image-optim","commit_stats":null,"previous_names":["bem/image-optim","egavr/image-optim"],"tags_count":12,"template":false,"template_full_name":null,"purl":"pkg:github/bem-archive/image-optim","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bem-archive%2Fimage-optim","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bem-archive%2Fimage-optim/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bem-archive%2Fimage-optim/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bem-archive%2Fimage-optim/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/bem-archive","download_url":"https://codeload.github.com/bem-archive/image-optim/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bem-archive%2Fimage-optim/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":36580152,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-08-06T04:43:03.162Z","status":"online","status_checked_at":"2026-08-12T02:00:07.134Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"bem-archive","name":"bem-archive","uuid":"22571106","kind":"organization","description":null,"email":null,"website":null,"location":null,"twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/22571106?v=4","repositories_count":48,"last_synced_at":"2024-03-25T23:09:22.936Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/bem-archive","funding_links":[],"total_stars":726,"followers":1,"following":0,"created_at":"2022-11-02T20:38:50.782Z","updated_at":"2024-03-25T23:09:23.479Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/bem-archive","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/bem-archive/repositories"},"tags":[{"name":"v0.5.0","sha":"92dc730bcedf6f20713429c1c0843390377c8a24","kind":"tag","published_at":"2018-03-05T09:47:38.000Z","download_url":"https://codeload.github.com/bem-archive/image-optim/tar.gz/v0.5.0","html_url":"https://github.com/bem-archive/image-optim/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/bem-archive/image-optim@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bem-archive%2Fimage-optim/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bem-archive%2Fimage-optim/tags/v0.5.0/manifests"},{"name":"v0.4.2","sha":"a3541513a828ad0ec61b4167de51c90b5435c8e8","kind":"tag","published_at":"2017-02-13T12:52:27.000Z","download_url":"https://codeload.github.com/bem-archive/image-optim/tar.gz/v0.4.2","html_url":"https://github.com/bem-archive/image-optim/releases/tag/v0.4.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/bem-archive/image-optim@v0.4.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bem-archive%2Fimage-optim/tags/v0.4.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bem-archive%2Fimage-optim/tags/v0.4.2/manifests"},{"name":"v0.4.1","sha":"aaac321cf4000495ac52214833a905fd4d7ee9e5","kind":"commit","published_at":"2015-11-13T08:41:56.000Z","download_url":"https://codeload.github.com/bem-archive/image-optim/tar.gz/v0.4.1","html_url":"https://github.com/bem-archive/image-optim/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/bem-archive/image-optim@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bem-archive%2Fimage-optim/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bem-archive%2Fimage-optim/tags/v0.4.1/manifests"},{"name":"v0.4.0","sha":"28556b305e10d087e45ef8d7e7fa4d8b51f10aaa","kind":"commit","published_at":"2015-05-25T14:02:50.000Z","download_url":"https://codeload.github.com/bem-archive/image-optim/tar.gz/v0.4.0","html_url":"https://github.com/bem-archive/image-optim/releases/tag/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/bem-archive/image-optim@v0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bem-archive%2Fimage-optim/tags/v0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bem-archive%2Fimage-optim/tags/v0.4.0/manifests"},{"name":"v0.3.4","sha":"a54e4e0836c2bdda4465492574e99964f5b05a64","kind":"commit","published_at":"2015-05-12T13:56:56.000Z","download_url":"https://codeload.github.com/bem-archive/image-optim/tar.gz/v0.3.4","html_url":"https://github.com/bem-archive/image-optim/releases/tag/v0.3.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/bem-archive/image-optim@v0.3.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bem-archive%2Fimage-optim/tags/v0.3.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bem-archive%2Fimage-optim/tags/v0.3.4/manifests"},{"name":"v0.3.3","sha":"db27f52c3e7fe167801c6441f0de44b30a9bd754","kind":"commit","published_at":"2015-04-15T20:13:19.000Z","download_url":"https://codeload.github.com/bem-archive/image-optim/tar.gz/v0.3.3","html_url":"https://github.com/bem-archive/image-optim/releases/tag/v0.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/bem-archive/image-optim@v0.3.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bem-archive%2Fimage-optim/tags/v0.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bem-archive%2Fimage-optim/tags/v0.3.3/manifests"},{"name":"v0.3.2","sha":"982abab640614ac785f5c643628c1cefeefecbd7","kind":"commit","published_at":"2015-03-26T10:43:25.000Z","download_url":"https://codeload.github.com/bem-archive/image-optim/tar.gz/v0.3.2","html_url":"https://github.com/bem-archive/image-optim/releases/tag/v0.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/bem-archive/image-optim@v0.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bem-archive%2Fimage-optim/tags/v0.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bem-archive%2Fimage-optim/tags/v0.3.2/manifests"},{"name":"v0.3.1","sha":"eda3fcc9a9b8bcbe460a5a370cc7b02208d60418","kind":"commit","published_at":"2015-03-09T14:31:36.000Z","download_url":"https://codeload.github.com/bem-archive/image-optim/tar.gz/v0.3.1","html_url":"https://github.com/bem-archive/image-optim/releases/tag/v0.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/bem-archive/image-optim@v0.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bem-archive%2Fimage-optim/tags/v0.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bem-archive%2Fimage-optim/tags/v0.3.1/manifests"},{"name":"v0.3.0","sha":"f2acd94bfa1288ce5cd5de9e060d859727bf63cd","kind":"commit","published_at":"2015-02-14T20:02:18.000Z","download_url":"https://codeload.github.com/bem-archive/image-optim/tar.gz/v0.3.0","html_url":"https://github.com/bem-archive/image-optim/releases/tag/v0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/bem-archive/image-optim@v0.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bem-archive%2Fimage-optim/tags/v0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bem-archive%2Fimage-optim/tags/v0.3.0/manifests"},{"name":"v0.2.0","sha":"fdd11a19cb0ccded93413c63cee92ac01637ae3e","kind":"commit","published_at":"2015-02-10T10:15:54.000Z","download_url":"https://codeload.github.com/bem-archive/image-optim/tar.gz/v0.2.0","html_url":"https://github.com/bem-archive/image-optim/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/bem-archive/image-optim@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bem-archive%2Fimage-optim/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bem-archive%2Fimage-optim/tags/v0.2.0/manifests"},{"name":"v0.1.0","sha":"7665bc2e2279c28520cbda7b89a2c53d03983c46","kind":"commit","published_at":"2015-02-04T21:22:17.000Z","download_url":"https://codeload.github.com/bem-archive/image-optim/tar.gz/v0.1.0","html_url":"https://github.com/bem-archive/image-optim/releases/tag/v0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/bem-archive/image-optim@v0.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bem-archive%2Fimage-optim/tags/v0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bem-archive%2Fimage-optim/tags/v0.1.0/manifests"},{"name":"v0.0.1","sha":"597bf0cff2d8028a28b828dd0feedd55fb5fdf8f","kind":"commit","published_at":"2015-02-02T22:15:04.000Z","download_url":"https://codeload.github.com/bem-archive/image-optim/tar.gz/v0.0.1","html_url":"https://github.com/bem-archive/image-optim/releases/tag/v0.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/bem-archive/image-optim@v0.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bem-archive%2Fimage-optim/tags/v0.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/bem-archive%2Fimage-optim/tags/v0.0.1/manifests"}]},"repo_metadata_updated_at":"2026-08-12T19:48:05.195Z","dependent_packages_count":3,"downloads":154,"downloads_period":"last-month","dependent_repos_count":6,"rankings":{"downloads":14.593336638844503,"dependent_repos_count":4.623341700840057,"dependent_packages_count":5.888476794839281,"stargazers_count":7.0629935318303065,"forks_count":7.323586000651241,"docker_downloads_count":null,"average":7.898346933401077},"purl":"pkg:npm/imageoptim","advisories":[{"uuid":"MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1tN2gtMzIzci05cDRn","url":"https://github.com/advisories/GHSA-mm7h-323r-9p4g","title":"Downloads Resources over HTTP in imageoptim","description":"imageoptim is a Node.js wrapper for some images compression algorithms.\n\nimageoptim downloads zipped resources over HTTP, which leaves it vulnerable to MITM attacks.  It may be possible to cause remote code execution (RCE) by swapping out the requested tarball with an attacker controlled tarball if the attacker is on the network or positioned in between the user and the remote server.\n\n\n## Recommendation\n\nNo fix is currently available for this vulnerability.\n\nIt is our recommendation to not install or use this module at this time.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2019-02-18T23:50:33.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://nvd.nist.gov/vuln/detail/CVE-2016-10596","https://github.com/advisories/GHSA-mm7h-323r-9p4g","https://www.npmjs.com/advisories/194"],"source_kind":"github","identifiers":["GHSA-mm7h-323r-9p4g","CVE-2016-10596"],"repository_url":null,"blast_radius":0.0,"created_at":"2022-12-21T16:13:22.123Z","updated_at":"2026-08-16T12:22:54.881Z","epss_percentage":0.01069,"epss_percentile":0.61505,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1tN2gtMzIzci05cDRn","html_url":"https://advisories.ecosyste.ms/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1tN2gtMzIzci05cDRn","packages":[{"ecosystem":"npm","package_name":"imageoptim","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 0.5.0"}],"purl":"pkg:npm/imageoptim"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLW1tN2gtMzIzci05cDRn/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/imageoptim","docker_dependents_count":null,"docker_downloads_count":null,"usage_url":"https://repos.ecosyste.ms/usage/npm/imageoptim","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/imageoptim/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2025-08-18T22:27:36.059Z","issues_count":20,"pull_requests_count":26,"avg_time_to_close_issue":360433.6923076923,"avg_time_to_close_pull_request":194870.46153846153,"issues_closed_count":13,"pull_requests_closed_count":26,"pull_request_authors_count":5,"issue_authors_count":6,"avg_comments_per_issue":0.8,"avg_comments_per_pull_request":1.2692307692307692,"merged_pull_requests_count":25,"bot_issues_count":0,"bot_pull_requests_count":0,"past_year_issues_count":0,"past_year_pull_requests_count":0,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":0,"past_year_issue_authors_count":0,"past_year_avg_comments_per_issue":null,"past_year_avg_comments_per_pull_request":null,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/bem-archive%2Fimage-optim/issues","maintainers":[{"login":"eGavr","count":36,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/eGavr"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/imageoptim/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/imageoptim/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/imageoptim/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/imageoptim/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/imageoptim/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/imageoptim/codemeta","maintainers":[{"uuid":"egavr","login":"egavr","name":null,"email":"job.egavr@yandex.ru","url":null,"packages_count":50,"html_url":"https://www.npmjs.com/~egavr","role":null,"created_at":"2022-11-12T19:37:38.657Z","updated_at":"2022-11-12T19:37:38.657Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/egavr/packages"}]}