Repository navigation

Improve image size - #1

Merged

dgrelaud merged 39 commits into

mainfrom

improve_image_size

Sep 8, 2026

Merged

Improve image size#1
dgrelaud merged 39 commits into
mainfrom
improve_image_size

Commits on Sep 7, 2026
- Add benchmarks + 100% test coverage
  dgrelaud
  committed
  dc9e79c
- switch to npm, keep one safe/modern gihtub CI
  dgrelaud
  committed
  9d1feb1
- test(security): add an isolated harness for proving denial-of-service bugs
  dgrelaud
  committed
  ee0438e
- fix(utils): keep every integer read inside the caller's view
  dgrelaud
  committed
  b2ccb82
- fix(utils): parse ISO base media box headers to spec
  dgrelaud
  committed
  bdcb7bc
- fix(icns): stop the infinite loop on a zero-length entry (CVE-2025-71330)
  dgrelaud
  committed
  4e1debc
- fix(heif): walk the property container once (CVE-2025-71329)
  dgrelaud
  committed
  f0a18ba
- fix(jxl): reject an empty codestream instead of feeding the bit reader
  dgrelaud
  committed
  ea5cf96
- fix(jpg): scan segments by index instead of reslicing the buffer
  dgrelaud
  committed
  91dfde3
- fix(tiff): walk the tag list by index, and drop the unused fs import
  dgrelaud
  committed
  f3dc8c6
- fix(bit-reader): reject a truncated codestream with a TypeError
  dgrelaud
  committed
  74fc7fc
- fix(ico): trust the buffer, not the declared entry count
  dgrelaud
  committed
  6320926
- fix(png): report a corrupt file from calculate, not from validate
  dgrelaud
  committed
  3defe80
- fix(detector): a validator that cannot read is not a verdict
  dgrelaud
  committed
  d96b5b8
- fix(lookup): refuse to hand back a size no image can have
  dgrelaud
  committed
  4a4b18d
- test(security): group the two linear-time scan proofs together
  dgrelaud
  committed
  4e49ff7
- docs: add a CHANGELOG for the 2.1.0 security release
  dgrelaud
  committed
  a64ca86
- style(utils): track the scan offset in a local, not the parameter
  dgrelaud
  committed
  955156f
- chore: release 3.0.0
  dgrelaud
  committed
  9219cfa
- simplify changelog
  dgrelaud
  committed
  f3c4972
- fix(pnm): read the header line by line instead of decoding the whole file
  dgrelaud
  committed
  b8571af
- fix(webp): check each stream against its own signature
  dgrelaud
  committed
  e3511bc
- fix(jxl): read the ftyp brand at the real payload offset
  dgrelaud
  committed
  438bb4b
- fix(fromFile): parse only the bytes the read actually returned
  dgrelaud
  committed
  4f04d5f
- perf(svg): match the root tag in the window that was already validated
  dgrelaud
  committed
  349520d
- perf(utils): read through a view instead of copying the range first
  dgrelaud
  committed
  a56ee0e
- docs: record the second audit pass in the 3.0.0 entry
  dgrelaud
  committed
  e8950de
- fix(fromFile): count the jobs in flight, so the budget is a real limit
  dgrelaud
  committed
  42d0737
- perf(jxl): view the codestream instead of copying it out of the container
  dgrelaud
  committed
  5186271
- perf(jpg): read the EXIF entries where they lie
  dgrelaud
  committed
  5e24d7c
- docs: record the third audit pass in the 3.0.0 entry
  dgrelaud
  committed
  677ce2c
- docs: fix the CVE links and cover the last commit
  dgrelaud
  committed
  72dfe84
- update CI
  dgrelaud
  committed
  98a9c6c
- test(security): stop reading slow start-up as a hang
  dgrelaud
  committed
  2eec4ae
- Make the tests compatible with GitHub CI.
  dgrelaud
  committed
  cc9c659
Commits on Sep 8, 2026
- Fix JPEG, TIFF, and optimize
  dgrelaud
  committed
  8703038
- update README and prepare for publication
  dgrelaud
  committed
  7f03f70
- simplify the Readme
  dgrelaud
  committed
  f3de274
- fix readme.md
  dgrelaud
  committed
  f36ec9a

Commits

Commits on Sep 7, 2026

Commits on Sep 8, 2026