# imagejs を Homebrew でインストール

imagejs のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。

## インストール

```sh
sudo av install brew:imagejs
```

追加のインストールコマンド:

### macOS

- Homebrew (100%):

```sh
brew install imagejs
```

  証拠: local Homebrew formula metadata

## パッケージ情報

- **パッケージキー:** brew:imagejs
- **パッケージマネージャ:** Homebrew
- **パッケージマネージャページ:** <https://formulae.brew.sh/formula/imagejs>
- **バージョン:** 0.7.2
- **ソース概要:** Tool to hide JavaScript inside valid image files
- **ホームページ:** <https://github.com/jklmnn/imagejs>
- **リポジトリ:** <https://github.com/jklmnn/imagejs>
- **ライセンス:** GPL-3.0-only
- **ソースアーカイブ:** <https://github.com/jklmnn/imagejs/archive/refs/tags/0.7.2.tar.gz>
- **生成日時:** 2026-08-04T22:13:35+00:00

## 実行可能ファイル

- imagejs (cli)
- imagejs (エイリアス)

## インストール挙動

- post-install フック: 未定義
- Bottle: 利用可能 対象 arm64_big_sur, arm64_linux, arm64_monterey, arm64_sequoia, arm64_sonoma, arm64_tahoe, arm64_ventura, big_sur, catalina, monterey, sonoma, ventura

## バージョンと鮮度

- ページ生成日: 2026-08-04
- マネージャ版: 0.7.2
- ローカルデータ: OK
- 上流リポジトリ: https://github.com/jklmnn/imagejs
- 検出された最新: 0.7.2 (最新)
- 情報: No package-manager update timestamp was available.
## プロジェクトの歴史と使われ方

imagejs is a small proof-of-concept command-line tool for packaging JavaScript into files that remain valid image files. The README presents it as a way to create image files that can execute JavaScript and explicitly connects the idea to extending XSS vulnerabilities.

### プロジェクトの歴史

The project appeared on GitHub in 2014 and credits Ajin Abraham's work on GIFs serving JavaScript as the idea that inspired the C implementation. The README says imagejs added bitmap support, and the changelog shows later support for GIF injection, BMP injection, WebP injection, and additional output formats.

### 採用の歴史

imagejs remained a niche security package rather than a broad media utility. GitHub repository metadata shows far more stars than package-manager breadth, and the input metadata lists Homebrew as the only package-manager mapping for this batch.

### 使われ方

Users run imagejs with an output type and a JavaScript file, producing an image-like file named after the input. The README documents BMP, GIF, WebP, PNM, and PGF outputs, a line-viewable BMP mode, and injection into existing GIF files.

### パッケージ好きにとっての重要性

The package is interesting because it lives at the boundary between file-format polyglots and web security demonstrations. It is not a general steganography suite; it is a compact package for showing how MIME assumptions, image upload policies, and script execution contexts can collide.

### タイムライン

- 2014: GitHub repository is created.
- 0.4.1: GIF, BMP, WebP, PNM, and PGF output support is documented in the changelog.
- 0.5.0: GIF injection support is added.
- 0.6.0: BMP injection support is added.
- 0.7.0: WebP injection support is added.

### Related projects

- The README names Ajin Abraham's GIF/JavaScript work as the source idea. Conceptually, imagejs is related to polyglot-file demos, browser XSS testing, and image steganography tools, although its stated goal is executable JavaScript-in-image proof of concept rather than secret-message hiding.

### ソース

- Project README, changelog, GitHub repository metadata, GitHub tags, and Homebrew formula metadata.


## セキュリティノート

broad file, network, media, or database tool signal.

- **Geiger リスク:** blue / 中
- broad file, network, media, or database tool signal

## ソースデータベース詳細

- **Source Database:** Homebrew formula API
- **Tap:** homebrew/core
- **Full Name:** imagejs
- **Version Scheme:** 0
- **Revision:** 0
- **Head Version:** HEAD
- **Bottle Stable Root URL:** <https://ghcr.io/v2/homebrew/core>
- **Deprecated:** no
- **Disabled:** no
- **Keg Only:** no
- **URL Keys:** head, stable


## 関連リンク

- [Source-control packages](https://pkg.so/ja/source-control-tools/) - Belongs to a source-control command family.
- [Secret-risk packages](https://pkg.so/ja/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals.
- [Terminal utility packages](https://pkg.so/ja/terminal-utilities/) - Matched terminal and command-line workflow metadata.
- [Language runtime packages](https://pkg.so/ja/language-runtime-packages/) - Matched language runtime, compiler, or interpreter metadata.
- [retire](https://pkg.so/ja/brew/retire/) - Shares pkgdb curated category or tags: cli, javascript, security.
- [mantra](https://pkg.so/ja/brew/mantra/) - Shares pkgdb curated category or tags: cli, javascript, security.
- [openssl@3](https://pkg.so/ja/brew/openssl-3/) - Shares pkgdb curated category or tags: cli, security.
- [gnutls](https://pkg.so/ja/brew/gnutls/) - Shares pkgdb curated category or tags: cli, security.
- [p11-kit](https://pkg.so/ja/brew/p11-kit/) - Shares pkgdb curated category or tags: cli, security.
- [gnupg](https://pkg.so/ja/brew/gnupg/) - Shares pkgdb curated category or tags: cli, security.
- [krb5](https://pkg.so/ja/brew/krb5/) - Shares pkgdb curated category or tags: cli, security.
- [nettle](https://pkg.so/ja/brew/nettle/) - Shares pkgdb curated category or tags: cli, security.
- [binwalk](https://pkg.so/ja/brew/binwalk/) - Both packages work with overlapping file formats or content types. Shared terms: cli, files, image, security.
- [urlfinder](https://pkg.so/ja/brew/urlfinder/) - Both packages touch the same language runtime or ecosystem. Shared terms: cli, files, javascript, security.
- [exif-be-gone](https://pkg.so/ja/npm/exif-be-gone/) - Both packages work with overlapping file formats or content types. Shared terms: cli, files, image, security.

## Combined YAML source

View the package source record on GitHub. [combined/imagejs.yml](https://github.com/mxcl/pkgdb/blob/main/combined/imagejs.yml)


## ソース

- pkg.so package database
- Geiger risk classifier
- package-page enrichment
- curated package history
- package version freshness
- pkgdb category and tag curation
- package relationship graph
- cross-ecosystem install command graph