Vulnerability in *sharp* library

[rawnsley]

A vulnerability has been flagged for the sharp library, which ndarray-pixels depends on.

This was flagged in my project by npm install and npm audit.

[donmccurdy]

More context:

• Vulnerability in libwebp dependency, please upgrade sharp to 0.32.6 (CVE-2023-4863) lovell/sharp#3798

Currently ndarray-pixels depends on ^0.32.1 (note the caret allows newer patch releases) and the fix lands in sharp 0.32.6, so I think that reinstalling ndarray-pixels should resolve the newer sharp version and fix the issue.

Alternatively, sharp can be configured to block the vulnerable WebP operation:

sharp.block({ operation: ["VipsForeignLoadWebp"] });

Regardless, I'll try to get a new ndarray-pixels release out in the next week.