Security News
38% of CISOs Fear They’re Not Moving Fast Enough on AI
CISOs are racing to adopt AI for cybersecurity, but hurdles in budgets and governance may leave some falling behind in the fight against cyber threats.
< 1 kB
GraphQL query minifier (3.4 kB
(gzip) if you include its only dependency, Moo).
This library removes all insignificant whitespace within a GraphQL query, as well as comments.
npm install gqlmin
import gqlmin from 'gqlmin';
const query = `
query allProducts {
products {
name
price
image {
medium
large
}
}
}
`;
const minified = gqlmin(query);
console.log(minified);
// query allProducts{products{name price …
Note: for Node.js < 13.3.0 or if ES Modules aren’t supported, use
const gqlmin = require('gqlmin')
instead.
npx gqlmin ./query.graphql -o ./query.min.graphql
If you don’t know if you need this, you probably don’t. In many apps, the whitespace within graphql queries isn’t significant. However, there are 2 scenarios where this can have big benefits:
GET
requests and need better caching. An underused feature of many GraphQL
servers is the ability to send GET
rather than POST
requests for queries (mutations don’t
support this). Minifying your GraphQL queries here can have some big benefits in reducing
unnecessary URL length, as well as deduplicating caches where queries differ by whitespace only.This library is useful because it can run at runtime (ES Modules) or as a build step (CLI).
Because the goals of this library are small file size and performance, it’s important to note this doesn’t validate GraphQL queries. This library assumes you have already done that.
This means that if you minify a malformed GraphQL query, it won’t err; it will just silently output the wrong thing. It’s assumed if you have a bad GraphQL query, your problems are probably bigger than minification. Either way, validation won’t be a part of this project because it would add weight.
FAQs
< 1 kB GraphQL query minifier
The npm package gqlmin receives a total of 0 weekly downloads. As such, gqlmin popularity was classified as not popular.
We found that gqlmin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
CISOs are racing to adopt AI for cybersecurity, but hurdles in budgets and governance may leave some falling behind in the fight against cyber threats.
Research
Security News
Socket researchers uncovered a backdoored typosquat of BoltDB in the Go ecosystem, exploiting Go Module Proxy caching to persist undetected for years.
Security News
Company News
Socket is joining TC54 to help develop standards for software supply chain security, contributing to the evolution of SBOMs, CycloneDX, and Package URL specifications.