DEVELOPER TOOLS/开发者工具·CLI
lokesh/color-thief
Grab the color palette from an image using just Javascript. Works in the browser and in Node.
怎么装：Install: npm install colorthief
02 / 现在的位置02 / Why now
首次发现FIRST SEEN
04 OCT 202604 OCT 2026
讨论DISCUSSION
1 SOURCES1 SOURCES
5 条外部提及5 external mentions
状态STATUS
持续活跃Active
HN_STORY · 4 points · 1 comments
HN_STORY · 10 points · 0 comments
HN_STORY · 1 points · 0 comments
03 / 它能帮你做什么03 / What it helps you do
04 / 安装04 / Install
$ Node 用户的安装方式。The install route for Node users.
$ README 里给出的安装方式。The installation method given in the README.
两种装法选一个即可 —— 上面那条给命令行用户，下面那条给写代码的用户。Pick one of the two — the first is for command-line users, the second for people writing code.
05 / 限制与风险05 / Limits and risk
风险不是警告，是可信度的一部分。以下结论只基于文档静态扫描，我们不会执行项目里的任何代码。Risk here is evidence, not an alarm. These findings come from static scanning of the docs; we never execute a project’s code.
限制LIMITS
未知Unknown
静态扫描STATIC SCAN
在 README、SKILL.md 和依赖清单中没有匹配到已知风险模式。No known risk patterns matched in the README, SKILL.md or dependency list.这不等于安全that does not mean it is safe，只能说明文档里没写。 — only that the docs do not mention it.
这里只做静态扫描：读 README、SKILL.md 和依赖清单，不执行代码。没有命中不代表安全。This is static scanning only: we read the README, SKILL.md and dependency list, and never execute code. No findings does not mean safe.
依赖：Dependencies:sharp
{
"agents": [],
"apiKey": null,
"docker": null,
"taxonomy": {
"scores": {
"design": 0,
"ai-tools": 0,
"dev-tools": 1,
"indie-web": 0,
"skill-agent": 0,
"productivity": 0
},
"primary": "dev-tools",
"secondary": "cli"
},
"localRuntime": null,
"skillMdTotal": 0,
"skillMdErrors": [],
"treeTruncated": false,
"categoryScores": {
"data": 0,
"agent": 0,
"media": 1,
"design": 1,
"browser": 0,
"devtool": 1,
"security": 0,
"marketing": 0,
"productivity": 0
},
"classification": [],
"scannedSources": [
"readme"
],
"skillMdFetched": 0
}