zerobucket 0.6.0 → 0.6.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +3 -0
- package/dist/index.cjs.map +1 -1
- package/dist/index.js.map +1 -1
- package/package.json +5 -5
package/README.md
CHANGED
|
@@ -24,6 +24,9 @@ npm install libheif-js # optional: accept HEIC (iPhone)
|
|
|
24
24
|
|
|
25
25
|
`pg` (the Postgres driver), `better-sqlite3` (SQLite) and `sharp` (image decoding/optimizing) are peer dependencies, so you
|
|
26
26
|
control their versions. If you only store PDFs through a custom validator, `sharp` is not needed.
|
|
27
|
+
`sharp` must be **0.35.5 or newer**: older versions bundle libvips/libheif/librsvg builds with published high-severity
|
|
28
|
+
advisories, and this package decodes untrusted uploads with it. A plain `npm install sharp` already gets a fixed version;
|
|
29
|
+
if you pinned an older one, upgrade with `npm install sharp@latest`.
|
|
27
30
|
For [object-storage tiering](#object-storage-tiering) also install `@aws-sdk/client-s3` (optional; loaded only when used).
|
|
28
31
|
Requires Node 20+ (SQLite needs Node 22+, see below). Ships ESM and CommonJS with full types.
|
|
29
32
|
|