Security issues in "image-size" dependency #4455

Hi Folks,

Less 4.6.6 has an optional dependency to the "image-size" package, which is archived on Github and has open security vulnerabilities (e.g. CVE-2025-71329). Would it be possible to replace the package by a more up-to-date alternative (e.g.: https://github.com/nodeca/probe-image-size)?

Thank you and best regards,
Christof