
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Replaces references to non-optimized scripts or stylesheets into a set of HTML files (or any templates/views).
API version of usemin. For purists, those who don't use build tools like Grunt and Gulp, but just use node as their build tool.
Install with npm:
npm install usemin
usemin-cli - Command line interface for this module.
var usemin = require('usemin');
Replaces references to non-optimized scripts or stylesheets into a set of HTML files (or any templates/views).
(string) filepath - HTML input file path.
(string) dest - Directory for where the optimized scripts and stylesheets should go.
(object) opts Optional - See below for the available options.
(string) The content of the final HTML file
var defaults = {
output: false, // HTML output path. If false, it will be printed to the console (string)
configFile: false, // config file path for UglifyJS, CleanCSS and HTML minifier (string)
config: false, // UglifyJS, CleanCSS and HTML minifier configs,
// similar format to the config file (object)
htmlmin: false, // Whether to minify the input HTML file (Boolean)
noprocess: false, // Do not process files, just replace references (Boolean)
removeLivereload: false, // Remove livereload script (Boolean)
};
var html = usemin('src/index.html', 'dist');
usemin('src/index.html', 'dist', {
output: 'dist/index.html',
htmlmin: true,
removeLivereload: true,
});
Extract information from a HTML input file to be processed later. This does not process any files (i.e., it doesn't perform uglify or minify).
(string) filepath - HTML input file path.
(string) content - Content of the HTML file as a string. (The reason for this is because the main usemin function uses this content multiple times, so to prevent the file being read multiples times it's simply cached into a variable to be passed into these API functions.)
(boolean) removeLivereload - Whether to also extract livereload script.
(object) An object of the following form:
[
{
async: false,
defer: false,
type: 'css',
dest: 'css/main.css',
indent: '\t',
searchPath: ['',],
src: [
inputsDir + 'css/foo.css',
inputsDir + 'css/bar.css',
],
raw: [
'\t<!-- build:css css/main.css -->',
'\t<link rel="stylesheet" href="css/foo.css">',
'\t<link rel="stylesheet" href="css/bar.css">',
'\t<!-- endbuild -->',
],
},
]
Returns configurations object for UglifyJS, CleanCSS and HTML minifier from a config file.
(string) configFile - Config file path. (.js extension can be omitted.)
(object) configOverride - Config object to override any previously set configs.
(object) An object of the following form:
{
uglifyjs: {
},
cleancss: {
},
htmlminifier: {
removeComments: true,
collapseWhitespace: true,
removeEmptyAttributes: true,
removeScriptTypeAttributes: true,
removeStyleLinkTypeAttributes: true,
minifyJS: true,
minifyCSS: true,
},
}
Uglify javascripts and CSS for a supplied block object from the usemin.getBlocks function.
(object[]) blocks - Blocks from the usemin.getBlocks function.
(string) dest - Directory for where the optimized scripts and stylesheets should go.
(object) config - Configuration object for UglifyJS, cleanCSS and HTML minifier.
(boolean) Throws error, otherwise true.
Returns the HTML with replaced references to non-optimized scripts or stylesheets.
(string) content - Content of the HTML file as a string. (The reason for this is because the main usemin function uses this content multiple times, so to prevent the file being read multiples times it's simply cached into a variable to be passed into these API functions.)
(object[]) blocks - Blocks from the usemin.getBlocks function.
(boolean) htmlmin - Whether to also minify the HTML.
(object) config - Configuration object for UglifyJS, cleanCSS and HTML minifier.
(string) The content of the final HTML file
Blocks are expressed as:
<!-- build:<pipelineId>(alternate search path) <path> -->
... HTML Markup, list of script / link tags.
<!-- endbuild -->
<!-- build:css css/main.js -->
<link rel="stylesheet" href="css/main.css">
<link rel="stylesheet" href="css/modules.css">
<!-- endbuild -->
<!-- build:js js/main.js -->
<script src="js/app.js"></script>
<script src="js/controllers.js"></script>
<!-- endbuild -->
<!-- build:js js/main.js -->
<script defer async src="js/app.js"></script>
<script defer async src="js/controllers.js"></script>
<!-- endbuild -->
<!-- build:remove -->
<script src="js/app.js"></script>
<script src="js/controllers.js"></script>
<!-- endbuild -->
<script>document.write('<script src="http://' + (location.host || 'localhost').split(':')[0] + ':35729/livereload.js?snipver=1"></' + 'script>')</script>
Running the command with --rmlr true will output:
<link rel="stylesheet" href="css/main.js">
<script src="js/main.js"></script>
<script defer async src="js/main.js"></script>
<!-- build:js(js) js/main.js -->
<script defer async src="app.js"></script>
<script defer async src="controllers.js"></script>
<!-- endbuild -->
<!-- build:js(js,.tmp) js/main.js -->
<script defer async src="app.js"></script>
<script defer async src="controllers.js"></script>
<!-- endbuild -->
Please check the relevant documentations for the available options: UglifyJS, CleanCSS and HTML minifier.
module.exports = {
uglifyjs: {
// ... UglifyJS API options
},
cleancss: {
// ... CleanCSS API options
},
htmlminifier: {
// ... HTML minifier API options
}
}
FAQs
Replaces references to non-optimized scripts or stylesheets into a set of HTML files (or any templates/views).
The npm package usemin receives a total of 131 weekly downloads. As such, usemin popularity was classified as not popular.
We found that usemin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.