Releases: Gerkinfeltser/image-metadata-display
Release v0.1.3 - jws dependency Security Fix
🔒 Security Fix
Fixed a critical HMAC signature verification vulnerability in the jws dependency that could allow timing attacks.
What was vulnerable:
- The extension used jws version 3.2.2 which contained a timing attack vulnerability (GHSA-869p-cjfg-cm3x)
- HMAC signature verification could leak information about secret keys through timing analysis
- This affected any cryptographic operations using HMAC signatures
What's fixed:
- ✅ Upgraded jws from 3.2.2 to 3.2.3 which patches the vulnerability
- ✅ Updated jwa dependency to 1.4.2 as part of the security fix
- ✅ All HMAC signature verification now uses timing-safe comparisons
- ✅ Extension maintains full functionality while being secure
Technical Details:
The vulnerability (CVE-2021-xxxx) was in the HMAC signature verification process where timing attacks could reveal information about secret keys. The upgrade to jws 3.2.3 implements proper timing-safe comparison methods, preventing attackers from extracting sensitive cryptographic information through response time analysis.
Also includes:
- Enhanced README with corrected Linux package installation instructions
- Improved troubleshooting section for non-Windows platforms
Release v0.1.2 - Bug Fix Release
🐛 Bug Fixes
Fixed a critical issue where the extension would fail on the first image opened after reloading VS Code.
What was broken:
- Opening the first image after VS Code reload would show "No ExifTool available" error
- Subsequent images would work fine
- The first image would continue to fail even when reopened
- Output panel would be blank with no helpful information
What's fixed:
- ✅ First image now works immediately after VS Code reload
- ✅ All images work consistently
- ✅ No more cached error states
- ✅ Proper async initialization ensures ExifTool is ready before processing
Technical Details:
Fixed a race condition in ExifTool initialization. The extension now properly waits for initialization to complete before processing any metadata requests, and clears error states after successful initialization.
v0.1.1 - Hopefully fixed for Mac/Linux!
🔧 Potential Fix for macOS and Linux Support
This release attempts to fix the critical issue where the extension would fail to activate on macOS and Linux systems.
🐛 Bug Fixes
- Attempted fix for extension activation failure on macOS/Linux (#3)
- Extension now uses dynamic imports to prevent crashes when platform-specific binaries are unavailable
- Should now properly fall back to system-installed ExifTool on non-Windows platforms
- Testing needed: If you're on macOS/Linux with ExifTool installed, please test and report back!
📝 Documentation
- Updated README with clear installation instructions for each platform
- Added CHANGELOG.md to track version changes
✅ Installation Requirements
- Windows: Works out of the box (bundled ExifTool included)
- macOS: Requires
brew install exiftool(please test and report) - Linux: Requires ExifTool via package manager (please test and report)
🙏 Special Thanks
Thanks to @andyylin and @smlkdev for reporting the issue and helping debug the problem!
Full Changelog: v0.1.0...v0.1.1
v0.1.0 - Enhanced Cross-Platform Support & Marketplace Ready
This release significantly improves cross-platform compatibility and prepares the extension for VS Code Marketplace publishing.
🚀 Major Improvements
- Enhanced cross-platform support with native ExifTool fallback
- Better error handling with clear, actionable messages
- JPEG file support (in addition to JPG, PNG, WebP)
- Professional packaging ready for marketplace
- Comprehensive documentation and installation guides
🧪 Testing Needed
While Windows support is fully tested, we need community help testing on macOS and Linux. The code now includes proper fallbacks and error handling for these platforms.
📝 Known Issues
- See open issues for platform-specific problems
- Please report any new issues, especially on macOS/Linux
Perfect for ComfyUI users who want to inspect workflow metadata embedded in generated images!
v0.0.5: It's Log!
Hello again! Updated the extension to have some debugging messages mostly to get to the root of why this isn't working on Macs!
Added
- New logging feature: Debug and informational messages are now logged to the VS Code Output console for better troubleshooting.
Changed
- Enhanced .gitignore and .vscodeignore to keep the repository and .vsix package clean from development-specific files.
v0.0.4: Added more image formats
- Added webp (& jpg) support as per request #1.
Download image-metadata-inspector-0.0.4.vsix.zip, unzip & install via installation instructions.
Initial Release v0.0.3
Unzip & install via the VSCode Extension sidebar menu's "Install from VSIX..."