Imaginemin currently only performs fixes...this is unusable for automated presubmit (pre-merge) checks. Although I am admittedly not very good with JS, I get the impression it would be pretty straightforward to add a parameter-controlled mode that compares the result of compression to the original file instead of writing to it. If the two are different, it would simply return in error.

If I find time, I will make the change and create a pull request. Allow me to reiterate, though, that I am inexperienced with JS and my implementation is likely to be ugly.

warning imagemin-lint-staged > imagemin-gifsicle > gifsicle > bin-build > download > gulp-decompress > [email protected]: gulp-util is deprecated -replace it, following the guidelines at https://medium.com/gulpjs/gulp-util-ca3b1f9f9ac5

Please update imagemin-gifsicle to latest version. The version in use (6.0.1) contains a vulnerable version of trim-newlines CVE-2021-33623

The project's current version is using imagemin-svgo 7.1.0, which uses a vulnerable version of is-svg (4.2.1) CVE-2021-28092

imagemin-svgo version 10.0.0 is no longer using such a vulnerable version
Please update imagemin-svgo version to >=10.0.0

I'm getting following error, when I try to commit png file:

$ git add ./image.png 
$ git commit -m wip

> husky - npm run -s precommit
> husky - node v9.10.1

 ❯ Running tasks for *.{png,jpeg,jpg,gif,svg}
   ⠙ imagemin-lint-staged
 ❯ Running tasks for *.{png,jpeg,jpg,gif,svg}
   ⠹ imagemin-lint-staged
 ❯ Running tasks for *.{png,jpeg,jpg,gif,svg}
   ⠸ imagemin-lint-staged
 ❯ Running tasks for *.{png,jpeg,jpg,gif,svg}
   ⠼ imagemin-lint-staged
 ❯ Running tasks for *.{png,jpeg,jpg,gif,svg}
   ⠴ imagemin-lint-staged
 ❯ Running tasks for *.{png,jpeg,jpg,gif,svg}
   ✖ imagemin-lint-staged
     → { Error: ENOENT: no such file or directory, open '--' errno: -2, code: 'ENOENT', syscall: 'open', path: '--' }
     git add
 ↓ Running tasks for *.less [skipped]
   → No staged files match *.less
 ↓ Running tasks for hhmobile/static/js/**/*.js [skipped]
   → No staged files match hhmobile/static/js/**/*.js
 ↓ Running tasks for *.py [skipped]
   → No staged files match *.py
 ↓ Running tasks for package.json [skipped]
   → No staged files match package.json
🚫 imagemin-lint-staged found some errors. Please fix them and try committing again.

{ Error: ENOENT: no such file or directory, open '--' errno: -2, code: 'ENOENT', syscall: 'open', path: '--' }

imagemin-lint-staged -- image.png gives me the almost same output, so it seems more like a imagemin-lint-staged problem:

$ imagemin-lint-staged -- image.png 
{ Error: ENOENT: no such file or directory, open '--' errno: -2, code: 'ENOENT', syscall: 'open', path: '--' }

There is no way to override the defaults. This is a problem in our case because imagemin-svgo by default strips all IDs and we need them.

sorry, nevermind.