Gathering detailed insights and metrics for blueimp-canvas-to-blob-global
Gathering detailed insights and metrics for blueimp-canvas-to-blob-global
JavaScript Canvas to Blob is a function to convert canvas elements into Blob objects.
Installations
npm install blueimp-canvas-to-blob-globalDeveloper Guide
BETA
Typescript
No
Module System
CommonJS
Node Version
12.22.1
NPM Version
6.14.12
Score
69.4
Supply Chain
99.3
Quality
75.1
Maintenance
100
Vulnerability
100
License
Releases
Unable to fetch releases
Languages
3
JavaScript
HTML
Shell
JavaScript (91.01%)
HTML (7.01%)
Shell (1.98%)
Developer
Download Statistics
Total Downloads
34,417
Last Day
21
Last Week
58
Last Month
318
Last Year
11,159
GitHub Statistics
MIT License
1,475 Stars
151 Commits
395 Forks
66 Watchers
2 Branches
8 Contributors
Updated on May 04, 2025
Bundle Size
1.44 kB
Minified
734.00 B
Minified + Gzipped
Maintainers
1
Package Meta Information
Latest Version
3.29.1
Package Id
blueimp-canvas-to-blob-global@3.29.1
Unpacked Size
14.63 kB
Size
5.59 kB
File Count
6
NPM Version
6.14.12
Node Version
12.22.1
Total Downloads
Cumulative downloads
Total Downloads
34,417
JavaScript Canvas to Blob
Contents
Description
Canvas to Blob is a polyfill for Browsers that don't support the standard JavaScript HTMLCanvasElement.toBlob method.
It can be used to create Blob objects from an HTML canvas element.
Setup
Install via NPM:
1npm install blueimp-canvas-to-blob
This will install the JavaScript files inside
./node_modules/blueimp-canvas-to-blob/js/ relative to your current directory,
from where you can copy them into a folder that is served by your web server.
Next include the minified JavaScript Canvas to Blob script in your HTML markup:
1<script src="js/canvas-to-blob.min.js"></script>
Or alternatively, include the non-minified version:
1<script src="js/canvas-to-blob.js"></script>
Usage
You can use the canvas.toBlob() method in the same way as the native
implementation:
1var canvas = document.createElement('canvas') 2// Edit the canvas ... 3if (canvas.toBlob) { 4 canvas.toBlob(function (blob) { 5 // Do something with the blob object, 6 // e.g. create multipart form data for file uploads: 7 var formData = new FormData() 8 formData.append('file', blob, 'image.jpg') 9 // ... 10 }, 'image/jpeg') 11}
Requirements
The JavaScript Canvas to Blob function has zero dependencies.
However, it is a very suitable complement to the JavaScript Load Image function.
Browsers
The following browsers have native support for HTMLCanvasElement.toBlob:
- Chrome 50+
- Firefox 19+
- Safari 11+
- Mobile Chrome 50+ (Android)
- Mobile Firefox 4+ (Android)
- Mobile Safari 11+ (iOS)
- Edge 79+
Browsers which implement the following APIs support canvas.toBlob() via
polyfill:
This includes the following browsers:
- Chrome 20+
- Firefox 13+
- Safari 8+
- Mobile Chrome 25+ (Android)
- Mobile Firefox 14+ (Android)
- Mobile Safari 8+ (iOS)
- Edge 74+
- Edge Legacy 12+
- Internet Explorer 10+
API
In addition to the canvas.toBlob() polyfill, the JavaScript Canvas to Blob
script exposes its helper function dataURLtoBlob(url):
1// Uncomment the following line when using a module loader like webpack: 2// var dataURLtoBlob = require('blueimp-canvas-to-blob') 3 4// black+white 3x2 GIF, base64 data: 5var b64 = 'R0lGODdhAwACAPEAAAAAAP///yZFySZFySH5BAEAAAIALAAAAAADAAIAAAIDRAJZADs=' 6var url = 'data:image/gif;base64,' + b64 7var blob = dataURLtoBlob(url)
Test
License
The JavaScript Canvas to Blob script is released under the MIT license.
No vulnerabilities found.
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENSE.txt:0
- Info: FSF or OSI recognized license: MIT License: LICENSE.txt:0
Reason
9 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-4q6p-r6v2-jvc5
- Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
- Warn: Project is vulnerable to: GHSA-qrpm-p2h7-hrv2
- Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-76p7-773f-r4q5
- Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7
Reason
0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Reason
Found 0/30 approved changesets -- score normalized to 0
Reason
no SAST tool detected
Details
- Warn: no pull requests merged into dev branch
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/test.yml:1
- Info: no jobLevel write permissions found
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/blueimp/JavaScript-Canvas-to-Blob/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/blueimp/JavaScript-Canvas-to-Blob/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/blueimp/JavaScript-Canvas-to-Blob/test.yml/master?enable=pin
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:17
- Info: 0 out of 3 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 1 npmCommand dependencies pinned
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
branch protection not enabled on development/release branches
Details
- Warn: branch protection not enabled for branch 'master'
Score
2.6
/10
Last Scanned on 2025-05-05
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More