Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Unmaintained Imagemin plugin has security issues and does not work with macOS M1 chip #242

Open
HeikkiYlipaavalniemi opened this issue Jan 24, 2022 · 1 comment
Labels
🪄 Enhancement New feature or request.

Comments

@HeikkiYlipaavalniemi
Copy link

HeikkiYlipaavalniemi commented Jan 24, 2022

We were updating our Emulsify version to more recent Storybook versions to handle NPM audit security warnings.

During this we noticed that the currently used Imagemin plugin has security issues. When digging deeper I noticed that the actual Imagemin plugin is unmaintained. It relies on the Imagemin package (npmjs.com/package/imagemin). There is an issue for the situation at github.com/imagemin/imagemin/issues/385.

The maintainer of the Imagemin plugin recommends switching to Squoosh (github.com/GoogleChromeLabs/squoosh). This plugin seems very active and it also has a Webpack plugin at squoosh-webpack-plugin.info.

I would suggest that we could also replace the current unmaintained Imagemin plugin with this alternative.

The other problem with the current plugin is that it does not compile with the newer macOS M1 chips.

@jklmnop
Copy link

jklmnop commented Mar 17, 2023

it would appear that even Squoosh is abandoned now too? GoogleChromeLabs/squoosh#1084 (comment)

it doesn't seem like there are any healthy projects to handle this task at the moment.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
🪄 Enhancement New feature or request.
Projects
No open projects
Status: Backlog
Development

No branches or pull requests

3 participants