Unsafe use of eval

[cristianstaicu]

The following use of eval in the file lib/resize.js is unsafe:

function getSizeFromRatio(options) {
    var ratio = eval(options.ratio);
    return Math.floor(options.size * ratio);
}

Since the ratio is a parameter passed to your module, the clients of your libary are not aware of these dangers and may allow arbitrary user input. I suggest refactoring out eval, parse the user input or use a sanitization module like:
https://www.npmjs.com/package/eval-sanitizer

[tiagoalves]

Thank you for bringing this up. I've just changed that particular code to use math.js's eval:

math.eval()

Also published v0.4.3 to npm.