node-minify MIT 51 versions

node-minify

npm Repository Homepage

Javascript / CSS minifier based on Babel-minify / Butternut / YUI Compressor / Google Closure Compiler / UglifyJS2 / Sqwish / Clean-css / CSSO

51

Versions

MIT

License

No

Install Scripts

Missing

Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

srod

Keywords

compressorminifyminifieryuigccgoogleclosurecompileruglifyjsuglifyjs2windowssqwishclean-csscssobabel-minifybutternut

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
dependencies	unvetted-dep:html-minifier	AI (dependencies): html-minifier is a well-known, widely-used HTML minification library; unvetted flag is a false positive for this established dependency.	ai	2026/04/24
semgrep	semgrep:child-process-spawn	AI (semgrep): node-minify spawns Java to run YUI/GCC minifiers — this is core documented functionality, not malicious code execution.	ai	2026/04/23
semgrep	semgrep:shady-links-raw-ip	AI (semgrep): Flagged line is a console.log of localhost (127.0.0.1) in an example server script — no real HTTP request, no exfiltration risk. Stable false positive for this package.	ai	2026/04/23
semgrep	semgrep:child-process-import	AI (semgrep): child_process import is required for spawning Java-based minifier backends; stable legitimate use for this package.	ai	2026/04/23

Versions (showing 51 of 79)

View all versions

Version	Deps	Published
3.6.0	21 / 9	2018-10-24
3.5.0	21 / 9	2018-09-20
3.3.0	20 / 9	2018-08-11
3.2.1	21 / 9	2018-08-04
3.2.0	21 / 9	2018-08-04
3.1.2	20 / 9	2018-08-01
3.1.1	20 / 9	2018-07-23
3.1.0	20 / 9	2018-06-14
3.0.1	19 / 9	2018-06-08
3.0.0	19 / 9	2018-06-08
2.4.2	13 / 9	2018-03-21
2.4.1	13 / 9	2017-11-11
2.4.0	13 / 8	2017-10-20
2.3.1	13 / 8	2017-09-24
2.3.0	13 / 3	2017-07-27
2.2.0	13 / 3	2017-07-21
2.1.1	13 / 3	2017-05-30
2.1.0	13 / 3	2017-05-21
2.0.5	13 / 9	2017-05-08
2.0.4	13 / 9	2017-04-09
2.0.3	13 / 9	2017-02-11
2.0.2	13 / 9	2016-11-27
2.0.0	13 / 8	2016-11-01
1.3.9	7 / 14	2016-07-05
1.3.8	7 / 14	2016-07-05
1.3.7	7 / 14	2015-12-08
1.3.6	7 / 14	2015-10-31
1.3.5	7 / 14	2015-10-27
1.3.4	7 / 14	2015-10-18
1.3.3	7 / 14	2015-10-18
1.3.2	7 / 10	2015-10-17
1.3.1	7 / 10	2015-10-11
1.3.0	7 / 10	2015-10-11
1.2.1	7 / 10	2015-09-20
1.2.0	7 / 10	2015-07-08
1.1.0	7 / 10	2015-04-11
1.0.2	7 / 10	2015-03-18
1.0.1	7 / 10	2014-12-11
1.0.0	7 / 10	2014-11-22
0.13.1	7 / 7	2014-11-21
0.12.1	7 / 7	2014-10-22
0.11.1	6 / 7	2014-10-12
0.10.5	6 / 7	2014-06-20
0.10.4	6 / 7	2014-06-19
0.10.3	6 / 7	2014-04-22
0.10.2	5 / 7	2014-03-19
0.10.1	5 / 7	2014-03-19
0.9.4	3 / 7	2014-03-14
0.9.3	3 / 7	2014-03-12
0.9.2	3 / 0	2014-03-12
0.9.1	3 / 0	2014-01-22

v3.6.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.5.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.3.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.2.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.2.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.1.2

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.1.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.1.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.0.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v3.0.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.4.2

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.4.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.4.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.3.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.3.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.2.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.1.1

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.1.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.5

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.4

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.3

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.2

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v2.0.0

1 finding

LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.