security: upgrade file-type dependency for cve https://cve.mitre.org/…

…cgi-bin/cvename.cgi?name=CVE-2022-36313

lib/tiles/creator/tileCreator.ts

@@ -1,4 +1,4 @@
-import fileType from 'file-type';
+import * as fileType from 'file-type';
 import proj4 from 'proj4';
 import ProjectTile from './projectTile';
 
@@ -138,12 +138,12 @@ export class TileCreator {
 
   /**
    * Adds a tile and reprojects it if necessary before drawing it into the target canvas
-   * @param tileData
-   * @param gridColumn
-   * @param gridRow
+   * @param tileData a `string` file path or `Buffer` containing image data
+   * @param gridColumn `number`
+   * @param gridRow `number`
    */
   async addTile(tileData: any, gridColumn: number, gridRow: number): Promise<void> {
-    const type = fileType(tileData);
+    const type = await (typeof tileData === 'string' ? fileType.fromFile(tileData) : fileType.fromBuffer(tileData));
     const tile = await ImageUtils.getImage(tileData, type.mime);
     this.tileContext.clearRect(0, 0, this.tileMatrix.tile_width, this.tileMatrix.tile_height);
     this.tileContext.drawImage(tile.image, 0, 0);

package.json

@@ -38,7 +38,7 @@
     "@turf/polygon-to-line": "6.5.0",
     "@types/geojson": "7946.0.8",
     "@types/proj4": "2.5.2",
-    "file-type": "12.4.0",
+    "file-type": "^16.5.4",
     "image-size": "0.8.3",
     "lodash": "4.17.21",
     "proj4": "2.8.0",