WP Manifestindependent plugin directory
manifest / performance / wp-cubi-imagemin

wp-cubi-imagemin WP Registry grade A-. Low-severity findings · 1 findingWP RegistryLow-severity findings · 1 findingOpen the reportA-

Standalone image minification WordPress plugin

★ 13stars
19kcomposer installs
1.3.3latest · 1 year ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/globalis-ms/wp-cubi-imagemin/archive/refs/heads/master.zip

On Packagist as globalis/wp-cubi-imagemin:

composer require globalis/wp-cubi-imagemin
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

wp-cubi-imagemin

Latest Stable Version License

Standalone image minification WordPress plugin

wp-cubi

Overview

wp-cubi-imagemin is a very simple image minification plugin for WordPress, meant to be used in a composer installation. It uses a couple of image minification tools to optimize uploaded images (jpg, png, gif and svg).

wp-cubi-imagemin is essentially a WordPress wrapper for psliwa/image-optimizer.

Installation

  • composer require globalis/wp-cubi-imagemin

Configuration

The plugin will try to find the image minification tools it needs on the system. But you can provide your own binaries instead, and the plugin will use them.

To use your own binaries, just define the following constants in your configuration files, pointing to your binaries paths :

define('WP_CUBI_IMAGEMIN_PATH_BIN_ADVPNG', '/var/www/your-project/bin/advpng');
define('WP_CUBI_IMAGEMIN_PATH_BIN_GIFSICLE', '/var/www/your-project/bin/gifsicle');
define('WP_CUBI_IMAGEMIN_PATH_BIN_JPEGOPTIM', '/var/www/your-project/bin/jpegoptim');
define('WP_CUBI_IMAGEMIN_PATH_BIN_JPEGTRAN', '/var/www/your-project/bin/jpegtran');
define('WP_CUBI_IMAGEMIN_PATH_BIN_OPTIPNG', '/var/www/your-project/bin/optipng');
define('WP_CUBI_IMAGEMIN_PATH_BIN_PNGCRUSH', '/var/www/your-project/bin/pngcrush');
define('WP_CUBI_IMAGEMIN_PATH_BIN_PNGOUT', '/var/www/your-project/bin/pngout');
define('WP_CUBI_IMAGEMIN_PATH_BIN_PNGQUANT', '/var/www/your-project/bin/pngquant');
define('WP_CUBI_IMAGEMIN_PATH_BIN_SVGO', '/var/www/your-project/bin/svgo');

If you do not define one ot the binaries paths, the plugin will try to use the system version. If it doesn't find an installed version on the system, it will just skip this tool and use the other ones.

You don't need to have all the tools working, but it is recommanded to have at least pngquant, jpegoptim and gifsicle to provide a meaningfull level of minification.

Note: binary files must have execution permissions.

Hooks

  • apply_filters('wp-cubi-imagemin\options', $options) : Filter the options of ImageOptimizer\OptimizerFactory (see the complete list), such as the JPG compression level (default to 85 in wp-cubi-imagemin).

Bulk optimization

Bulk image optimization can be done using wp-cli :

  • Install wp-cli and ensure wp-cubi-imagemin is activated
  • Usage: wp media optimize <directories>... [--jpeg_level=<jpeg_level>]
  • Help: wp help media optimize

Note: thumbnails regeneration commands such as wp media regenerate will trigger plugin optimization functions as well.

Binaries

Available binaries :

Development

Before opening pull requests, please check and apply project coding standards with ./vendor/bin/phpcs . and/or ./vendor/bin/phpcbf .

Releases

14 releases.

Tag
Published
1.3.3 latest
Nov 7, 2024 1 year ago
Jan 27, 2023 3 years ago
Feb 7, 2022 4 years ago
Feb 7, 2022 4 years ago
Oct 14, 2019 7 years ago
May 22, 2019 7 years ago
Apr 5, 2019 7 years ago
Nov 9, 2018 7 years ago
May 25, 2018 8 years ago
May 9, 2018 8 years ago
Apr 23, 2018 8 years ago
Mar 7, 2018 8 years ago
Jan 24, 2018 8 years ago
Jan 18, 2018 8 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

A- grade

Security

wp-cubi-imagemin 1.3.1 · audited by WP Registry

Low-severity findings only.

1 low
Audited release
1.3.1
Findings
1
Worst severity
low
Content hash
19a1f4ad7145ace90df8c264…

Findings

  • low Plugin header version stays 1.3.1 while the distributed git tag is 1.3.3

    version_mismatch

    wp-cubi-imagemin.php still declares Version 1.3.1 (Tested up to 5.9.0) even though this archive is GitHub tag 1.3.3. Tag 1.3.3 is not a no-op: composer.json swapped ps/image-optimizer for spatie/image-optimizer and ImageMin::getOptimizer() now calls OptimizerChainFactory::create() without the previously passed $options. Update checkers and vulnerability scanners that key on the plugin header will mis-identify the installed build as 1.3.1.

    wp-cubi-imagemin.php:3-13

    Recommendation

    Bump the plugin header Version (and any packaged/readme version) to the real git tag (1.3.3) on every release.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.