
Security News
npm Tooling Bug Incorrectly Marks One-Character Packages as Security Holders
npm confirmed a tooling bug incorrectly marked several one-character packages as security holders and said it was working on a rollback.
@studioframes/condense
Advanced tools
High-performance in-memory stateless file optimization middleware and utility library
A high-performance, completely stateless file optimization and minification engine for Node.js. Condense handles images, video, audio, and code natively in-memory (RAM) using Buffers and Streams, completely bypassing the local server disk.
It can be run as a standalone API server via CLI, mounted inside an existing Express application as a router, or used directly in your codebase via programmatic utility functions.
data-condense-ignore to any HTML tag (or /* condense-ignore */ in JS/CSS) to prevent minification on a per-element or per-file basis.Media optimization now bundles FFmpeg directly inside the package using ffmpeg-static, so you do not need to install ffmpeg globally for media workflows.
If you are running on an unusual platform not supported by ffmpeg-static, you may still need a system FFmpeg installed.
npm install @studioframes/condense
Run a dedicated Condense microservice directly from your terminal:
npx @studioframes/condense
Defaults to port 3000. You can configure the port using the PORT environment variable:
PORT=8080 npx @studioframes/condense
Mount Condense directly onto an existing Express application router:
const express = require('express');
const { condenseApp } = require('@studioframes/condense');
const app = express();
// Mount all optimization routes under a specific path
app.use('/v1', condenseApp);
app.listen(8080, () => {
console.log('App running. POST files to http://localhost:8080/v1/optimize');
});
Import the low-level processing functions to optimize Buffers directly inside your codebase without HTTP routing:
const { optimizeImage, optimizeText, optimizeMediaStream } = require('@studioframes/condense');
// 1. Optimize an Image Buffer (returns Buffer)
const { buffer: imgBuffer, outMime: imgMime } = await optimizeImage(rawImageBuffer, 'image/png', 'extreme');
// 2. Optimize an HTML / CSS / JS Buffer (returns Buffer)
const { buffer: textBuffer, outMime: textMime } = await optimizeText(rawHtmlBuffer, 'text/html', 'quality');
// 3. Optimize Audio / Video (returns PassThrough Stream)
const { stream, outMime: mediaMime } = optimizeMediaStream(rawVideoBuffer, 'video/mp4', 'quality');
Condense supports local directives so that specific code segments are not modified during minification.
Add the data-condense-ignore attribute to any tag (or the root <html> tag to ignore the whole file). Condense protects that tag and all its nested children:
<!-- This div, the image, and the text will be returned exactly as-is -->
<div data-condense-ignore class="uncompressed-layout">
<p> Some formatted text here. </p>
<img src="large-photo.jpg">
</div>
<!-- This will be compressed normally -->
<p>This paragraph gets minified.</p>
Add the /* condense-ignore */ comment anywhere inside your JS or CSS file to bypass minification entirely:
/* condense-ignore */
function legacyCode() {
// This file will not be altered
var x = 10;
}
POST /optimizeOptimizes an uploaded file in-memory.
Payload (Multipart Form-Data):
file: The binary file (Max 50MB)method: quality (visually lossless, default) or extreme (aggressive size reduction)Example Request:
curl -X POST http://localhost:3000/v1/optimize \
-F "file=@./photo.png" \
-F "method=extreme" \
--output photo-condensed.webp
FAQs
High-performance in-memory stateless file optimization middleware and utility library
The npm package @studioframes/condense receives a total of 70 weekly downloads. As such, @studioframes/condense popularity was classified as not popular.
We found that @studioframes/condense demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
npm confirmed a tooling bug incorrectly marked several one-character packages as security holders and said it was working on a rollback.

Research
/Security News
Newer packages in this compromise use native extensions and .pth loaders to execute JavaScript stealers in developer environments.

Research
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.