
Security News
OWASP 2025 Top 10 Adds Software Supply Chain Failures, Ranked Top Community Concern
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.
metalsmith-gzip
Advanced tools
A Metalsmith plugin that creates gzipped copies of the site's content. This is useful for website hosting on Amazon S3, where on the fly compression in the server is impossible.
$ npm install metalsmith-gzip
var Metalsmith = require('metalsmith');
var compress = require('metalsmith-gzip');
var metalsmith = new Metalsmith(__dirname)
.use(compress());
metalsmith-gzip will gzip a file if the extension matches this regular expression:
/\.[html|css|js|json|xml|svg|txt]/
The choice of files to compress is loosely based on the HTML5 Boilerplate server configuration.
Pass an options object to customize metalsmith-gzip behaviour. These are the available options keys:
src is a multimatch pattern which specifies which types of files to compress.
var metalsmith = new Metalsmith(__dirname)
.use(compress({src: ['**/*.js', '**/*.css']})); // only compresses JavaScript and CSS
gzip is the same configuration object accepted by zlib.createGzip (http://nodejs.org/api/zlib.html#zlib_options). For example, you can set the compression level:
var metalsmith = new Metalsmith(__dirname)
.use(compress({
src: ['**/*.js', '**/*.css'],
gzip: {level: 6}
}));
Add overwrite: true to replace files with the compressed version instead of creating a copy with the '.gz' extension:
var metalsmith = new Metalsmith(__dirname)
.use(compress({overwrite: true});
You need to create a script to upload the gzipped versions of the files to your preferred hosting provider yourself. Take care to serve the files with the correct Content-Encoding.
This plugin was inspired by the Middleman gzip extension.
2.0.0 ##
FAQs
A Metalsmith plugin to compress build files with gzip.
The npm package metalsmith-gzip receives a total of 58 weekly downloads. As such, metalsmith-gzip popularity was classified as not popular.
We found that metalsmith-gzip demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.