qpdf-compress 0.4.1 → 0.6.0

package/CHANGELOG.md

@@ -4,6 +4,19 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/), and this project adheres to [Semantic Versioning](https://semver.org/).
 
+## [0.6.0] - 2026-04-04
+
+### Changed
+
+- **mozjpeg**: replaced libjpeg-turbo with vendored mozjpeg 4.1.1 for 5–15% smaller JPEGs via trellis quantization, overshoot deringing, and optimized progressive scan ordering — applies to both lossy recompression and lossless Huffman optimization
+
+## [0.5.0] - 2026-04-04
+
+### Added
+
+- `concurrency()` — get/set max concurrent compress operations dispatched to the libuv thread pool (default: CPU cores, powered by p-limit)
+- Husky + lint-staged pre-commit hook (Prettier + ESLint on staged files)
+
 ## [0.4.0] - 2026-03-31
 
 ### Added

package/README.md

@@ -58,7 +58,7 @@ const smaller = await compress(pdfBuffer, { lossy: true });
 | Integration               | Native Node.js addon  | Shell exec        | Shell exec        |
 | Async I/O                 | ✅ Non-blocking       | ❌ Blocks on exec | ❌ Blocks on exec |
 | Image deduplication       | ✅                    | ❌                | ❌                |
-| JPEG Huffman optimization | ✅ Lossless (libjpeg) | ❌                | ❌                |
+| JPEG Huffman optimization | ✅ Lossless (mozjpeg) | ❌                | ❌                |
 | Lossy image compression   | ✅ Auto quality       | ❌                | ✅                |
 | CMYK → RGB conversion     | ✅ Automatic          | ❌                | ✅                |
 | DPI downscaling           | ✅ Lossy mode         | ❌                | ✅                |
@@ -91,20 +91,20 @@ Prebuilt binaries are available for all [supported platforms](#-supported-platfo
 - CMake ≥ 3.16
 - C++20 compiler (GCC 10+, Clang 13+, MSVC 2019+)
 - zlib development headers
-- libjpeg-turbo (or libjpeg) development headers
+- nasm (optional, for mozjpeg SIMD acceleration)
 
 ```bash
 # macOS
-brew install cmake jpeg-turbo
+brew install cmake nasm
 
 # Ubuntu / Debian
-sudo apt install cmake g++ zlib1g-dev libjpeg-turbo8-dev
+sudo apt install cmake g++ zlib1g-dev nasm
 
 # Amazon Linux / RHEL
-sudo yum install cmake3 gcc-c++ zlib-devel libjpeg-turbo-devel
+sudo yum install cmake3 gcc-c++ zlib-devel nasm
 
 # Windows (using vcpkg)
-vcpkg install zlib libjpeg-turbo --triplet x64-windows-static
+vcpkg install zlib --triplet x64-windows-static
 ```
 
 ## 🌍 Supported Platforms
@@ -189,9 +189,27 @@ Compresses a PDF document. Automatically repairs damaged PDFs.
 - Only replaces images where the result is actually smaller
 - Skips tiny images (< 50×50 px)
 
+### `concurrency(value?): number`
+
+Gets or sets the maximum number of concurrent compress operations dispatched to the thread pool.
+
+The default is the number of CPU cores (`os.availableParallelism()`). A value of `0` resets to the default.
+
+Excess calls are queued in JavaScript, preventing libuv thread pool starvation.
+
+```typescript
+import { compress, concurrency } from 'qpdf-compress';
+
+concurrency(); // 8 (CPU cores)
+concurrency(2); // limit to 2 concurrent operations
+concurrency(0); // reset to default
+```
+
+---
+
 ## ⚙️ How it works
 
-This package embeds [QPDF](https://github.com/qpdf/qpdf) (v12.3.2) as a statically linked C++ library, exposed to Node.js via N-API. Lossless JPEG optimization uses [libjpeg-turbo](https://libjpeg-turbo.org/) at the DCT coefficient level. Image recompression in lossy mode also uses libjpeg-turbo for JPEG encoding. TrueType font subsetting is handled by a custom binary parser that reads cmap tables, resolves composite glyph dependencies, and rebuilds glyf/loca/hmtx tables with only the used glyphs.
+This package embeds [QPDF](https://github.com/qpdf/qpdf) (v12.3.2) and [mozjpeg](https://github.com/mozilla/mozjpeg) (v4.1.1) as statically linked C++ libraries, exposed to Node.js via N-API. Lossless JPEG optimization uses mozjpeg at the DCT coefficient level with progressive scan optimization. Image recompression in lossy mode uses mozjpeg's trellis quantization for 5–15% smaller JPEGs at the same perceptual quality. TrueType font subsetting is handled by a custom binary parser that reads cmap tables, resolves composite glyph dependencies, and rebuilds glyf/loca/hmtx tables with only the used glyphs.
 
 All operations run in a background thread via `Napi::AsyncWorker`, so the event loop is never blocked.
 

package/binding.gyp

@@ -12,6 +12,7 @@
       "include_dirs": [
         "<!@(node -p \"require('node-addon-api').include\")",
         "deps/qpdf/include",
+        "deps/mozjpeg/include",
         "src"
       ],
       "defines": [
@@ -39,7 +40,8 @@
           {
             "include_dirs": [
               "/opt/homebrew/include",
-              "/usr/local/include"
+              "/usr/local/include",
+              "<(module_root_dir)/deps/mozjpeg/include"
             ],
             "xcode_settings": {
               "GCC_ENABLE_CPP_EXCEPTIONS": "YES",
@@ -58,7 +60,7 @@
                 "-L/opt/homebrew/lib",
                 "-L/usr/local/lib",
                 "-lz",
-                "-ljpeg",
+                "<(module_root_dir)/deps/mozjpeg/lib/libjpeg.a",
                 "-flto",
                 "-Wl,-dead_strip",
                 "-Wl,-S"
@@ -72,7 +74,7 @@
             "libraries": [
               "<(module_root_dir)/deps/qpdf/lib/libqpdf.a",
               "-lz",
-              "-ljpeg",
+              "<(module_root_dir)/deps/mozjpeg/lib/libjpeg.a",
               "-flto",
               "-Wl,--gc-sections",
               "-Wl,-S",
@@ -104,7 +106,7 @@
             "libraries": [
               "<(module_root_dir)/deps/qpdf/lib/qpdf.lib",
               "<(module_root_dir)/deps/qpdf/lib/zlib.lib",
-              "<(module_root_dir)/deps/qpdf/lib/jpeg.lib"
+              "<(module_root_dir)/deps/mozjpeg/lib/jpeg-static.lib"
             ]
           }
         ]

package/dist/concurrency.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Gets or sets the maximum number of concurrent operations.
+ *
+ * The default value is the number of CPU cores (`os.availableParallelism()`).
+ * A value of `0` resets to the default.
+ */
+export declare function concurrency(value?: number): number;
+export declare function withConcurrency<T>(fn: () => Promise<T>): Promise<T>;
+//# sourceMappingURL=concurrency.d.ts.map

package/dist/concurrency.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"concurrency.d.ts","sourceRoot":"","sources":["../lib/concurrency.ts"],"names":[],"mappings":"AAKA;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAQlD;AAED,wBAAgB,eAAe,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAEnE"}

package/dist/concurrency.js

@@ -0,0 +1,22 @@
+import { availableParallelism } from 'node:os';
+import pLimit from 'p-limit';
+let limit = pLimit(availableParallelism());
+/**
+ * Gets or sets the maximum number of concurrent operations.
+ *
+ * The default value is the number of CPU cores (`os.availableParallelism()`).
+ * A value of `0` resets to the default.
+ */
+export function concurrency(value) {
+    if (value !== undefined) {
+        if (!Number.isInteger(value) || value < 0) {
+            throw new TypeError('Concurrency must be a non-negative integer');
+        }
+        limit = pLimit(value === 0 ? availableParallelism() : value);
+    }
+    return limit.concurrency;
+}
+export function withConcurrency(fn) {
+    return limit(fn);
+}
+//# sourceMappingURL=concurrency.js.map

package/dist/concurrency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"concurrency.js","sourceRoot":"","sources":["../lib/concurrency.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AAC/C,OAAO,MAA8B,MAAM,SAAS,CAAC;AAErD,IAAI,KAAK,GAAkB,MAAM,CAAC,oBAAoB,EAAE,CAAC,CAAC;AAE1D;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;QACpE,CAAC;QACD,KAAK,GAAG,MAAM,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,KAAK,CAAC,WAAW,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,eAAe,CAAI,EAAoB;IACrD,OAAO,KAAK,CAAC,EAAE,CAAC,CAAC;AACnB,CAAC"}

package/dist/index.d.ts

@@ -16,5 +16,6 @@ export declare function compress(input: PdfInput, options: CompressOptions & {
     output: string;
 }): Promise<void>;
 export declare function compress(input: PdfInput, options?: CompressOptions): Promise<Buffer>;
+export { concurrency } from './concurrency.js';
 export type { CompressOptions } from './types.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../lib/index.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAe,MAAM,YAAY,CAAC;AAY/D,KAAK,QAAQ,GAAG,MAAM,GAAG,MAAM,CAAC;AAEhC;;;;;;;;;;;GAWG;AACH,wBAAgB,QAAQ,CACtB,KAAK,EAAE,QAAQ,EACf,OAAO,EAAE,eAAe,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAC5C,OAAO,CAAC,IAAI,CAAC,CAAC;AACjB,wBAAgB,QAAQ,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;AAqBtF,YAAY,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../lib/index.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAe,MAAM,YAAY,CAAC;AAY/D,KAAK,QAAQ,GAAG,MAAM,GAAG,MAAM,CAAC;AAEhC;;;;;;;;;;;GAWG;AACH,wBAAgB,QAAQ,CACtB,KAAK,EAAE,QAAQ,EACf,OAAO,EAAE,eAAe,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAC5C,OAAO,CAAC,IAAI,CAAC,CAAC;AACjB,wBAAgB,QAAQ,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;AAuBtF,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,YAAY,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -1,6 +1,7 @@
 import { createRequire } from 'node:module';
 import { dirname, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
+import { withConcurrency } from './concurrency.js';
 const require = createRequire(import.meta.url);
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const addonDir = resolve(__dirname, '..', 'build', 'Release');
@@ -23,10 +24,11 @@ export async function compress(input, options) {
         throw new TypeError('Input must be a Buffer or file path string');
     }
     const stripMetadata = options?.stripMetadata ?? true;
-    return addon.compress(input, {
+    return withConcurrency(() => addon.compress(input, {
         ...(options?.lossy ? { lossy: true } : {}),
         ...(stripMetadata ? { stripMetadata: true } : {}),
         ...(options?.output ? { output: options.output } : {}),
-    });
+    }));
 }
+export { concurrency } from './concurrency.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../lib/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGzC,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE1D,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;AAC9D,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;IACjC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;AAC7D,CAAC;AAED,MAAM,KAAK,GAAgB,OAAO,CAAC,qCAAqC,CAAC,CAAC;AAqB1E,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,KAAe,EAAE,OAAyB;IACvE,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,SAAS,CAAC,4BAA4B,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,aAAa,GAAG,OAAO,EAAE,aAAa,IAAI,IAAI,CAAC;IACrD,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE;QAC3B,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvD,CAA2B,CAAC;AAC/B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../lib/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAGnD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE1D,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;AAC9D,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;IACjC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;AAC7D,CAAC;AAED,MAAM,KAAK,GAAgB,OAAO,CAAC,qCAAqC,CAAC,CAAC;AAqB1E,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,KAAe,EAAE,OAAyB;IACvE,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,SAAS,CAAC,4BAA4B,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,aAAa,GAAG,OAAO,EAAE,aAAa,IAAI,IAAI,CAAC;IACrD,OAAO,eAAe,CAAC,GAAG,EAAE,CAC1B,KAAK,CAAC,QAAQ,CAAC,KAAK,EAAE;QACpB,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvD,CAAC,CACuB,CAAC;AAC9B,CAAC;AAED,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC"}

package/lib/concurrency.ts

@@ -0,0 +1,24 @@
+import { availableParallelism } from 'node:os';
+import pLimit, { type LimitFunction } from 'p-limit';
+
+let limit: LimitFunction = pLimit(availableParallelism());
+
+/**
+ * Gets or sets the maximum number of concurrent operations.
+ *
+ * The default value is the number of CPU cores (`os.availableParallelism()`).
+ * A value of `0` resets to the default.
+ */
+export function concurrency(value?: number): number {
+  if (value !== undefined) {
+    if (!Number.isInteger(value) || value < 0) {
+      throw new TypeError('Concurrency must be a non-negative integer');
+    }
+    limit = pLimit(value === 0 ? availableParallelism() : value);
+  }
+  return limit.concurrency;
+}
+
+export function withConcurrency<T>(fn: () => Promise<T>): Promise<T> {
+  return limit(fn);
+}

package/lib/index.ts

@@ -1,6 +1,7 @@
 import { createRequire } from 'node:module';
 import { dirname, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
+import { withConcurrency } from './concurrency.js';
 import type { CompressOptions, NativeAddon } from './types.js';
 
 const require = createRequire(import.meta.url);
@@ -45,11 +46,14 @@ export async function compress(input: PdfInput, options?: CompressOptions): Prom
     throw new TypeError('Input must be a Buffer or file path string');
   }
   const stripMetadata = options?.stripMetadata ?? true;
-  return addon.compress(input, {
-    ...(options?.lossy ? { lossy: true } : {}),
-    ...(stripMetadata ? { stripMetadata: true } : {}),
-    ...(options?.output ? { output: options.output } : {}),
-  }) as Promise<Buffer | void>;
+  return withConcurrency(() =>
+    addon.compress(input, {
+      ...(options?.lossy ? { lossy: true } : {}),
+      ...(stripMetadata ? { stripMetadata: true } : {}),
+      ...(options?.output ? { output: options.output } : {}),
+    }),
+  ) as Promise<Buffer | void>;
 }
 
+export { concurrency } from './concurrency.js';
 export type { CompressOptions } from './types.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "qpdf-compress",
-  "version": "0.4.1",
+  "version": "0.6.0",
   "description": "Native PDF compression for Node.js, powered by QPDF",
   "license": "Apache-2.0",
   "type": "module",
@@ -69,15 +69,23 @@
     "build": "node-gyp rebuild && node scripts/bundle-lib.mjs",
     "build:ts": "tsc",
     "prepublishOnly": "tsc",
-    "download": "node scripts/download-qpdf.mjs",
+    "download": "node scripts/download-mozjpeg.mjs && node scripts/download-qpdf.mjs",
+    "download:mozjpeg": "node scripts/download-mozjpeg.mjs",
+    "download:qpdf": "node scripts/download-qpdf.mjs",
     "test": "vitest run",
     "lint": "eslint --fix .",
     "lint:check": "eslint .",
     "format": "prettier --write .",
-    "format:check": "prettier --check ."
+    "format:check": "prettier --check .",
+    "prepare": "husky"
+  },
+  "lint-staged": {
+    "*.{ts,js,json,md,yaml,yml}": "prettier --write",
+    "*.{ts,js}": "eslint --max-warnings 0"
   },
   "dependencies": {
-    "node-addon-api": "^8.0.0"
+    "node-addon-api": "^8.0.0",
+    "p-limit": "^7.3.0"
   },
   "devDependencies": {
     "@eslint/js": "^10.0.1",
@@ -85,6 +93,8 @@
     "eslint": "^10.1.0",
     "eslint-config-prettier": "^10.1.8",
     "eslint-plugin-prettier": "^5.5.5",
+    "husky": "^9.1.7",
+    "lint-staged": "^16.4.0",
     "node-gyp": "^11.0.0",
     "prettier": "^3.8.1",
     "typescript": "^5.9.3",

package/scripts/download-mozjpeg.mjs

@@ -0,0 +1,162 @@
+import { execFileSync } from 'node:child_process';
+import { createWriteStream, mkdirSync, existsSync, rmSync, readdirSync } from 'node:fs';
+import { pipeline } from 'node:stream/promises';
+import { Readable } from 'node:stream';
+import { join } from 'node:path';
+
+const MOZJPEG_VERSION = '4.1.1';
+const BASE_URL = 'https://github.com/mozilla/mozjpeg/archive/refs/tags';
+
+const root = join(import.meta.dirname, '..');
+const depsDir = join(root, 'deps', 'mozjpeg');
+
+if (existsSync(join(depsDir, 'include', 'jpeglib.h'))) {
+  console.log('mozjpeg already built, skipping.');
+  process.exit(0);
+}
+
+// validate version to prevent SSRF
+if (!/^\d+\.\d+\.\d+$/.test(MOZJPEG_VERSION)) {
+  console.error(`Invalid mozjpeg version: ${MOZJPEG_VERSION}`);
+  process.exit(1);
+}
+
+const url = `${BASE_URL}/v${MOZJPEG_VERSION}.tar.gz`;
+const tarball = join(root, `mozjpeg-${MOZJPEG_VERSION}.tar.gz`);
+const srcDir = join(root, `mozjpeg-${MOZJPEG_VERSION}`);
+const buildDir = join(root, 'build-mozjpeg');
+
+// step 1: download
+console.log(`Downloading mozjpeg ${MOZJPEG_VERSION}...`);
+console.log(`URL: ${url}`);
+
+const response = await fetch(url, { redirect: 'follow' });
+if (!response.ok) {
+  console.error(`Download failed: ${response.status} ${response.statusText}`);
+  process.exit(1);
+}
+
+mkdirSync(join(root, 'deps'), { recursive: true });
+await pipeline(Readable.fromWeb(response.body), createWriteStream(tarball));
+
+console.log('Extracting...');
+execFileSync('tar', ['-xzf', tarball, '-C', root], { stdio: 'inherit' });
+rmSync(tarball);
+
+// GitHub archive tarballs extract to `mozjpeg-{tag}` — find the directory
+if (!existsSync(srcDir)) {
+  const candidates = readdirSync(root).filter(
+    (d) => d.startsWith('mozjpeg-') && !d.endsWith('.tar.gz'),
+  );
+  const match = candidates.find((d) => d.includes(MOZJPEG_VERSION));
+  if (match) {
+    const { renameSync } = await import('node:fs');
+    renameSync(join(root, match), srcDir);
+    console.log(`Renamed ${match} → mozjpeg-${MOZJPEG_VERSION}`);
+  } else {
+    console.error(
+      `Could not find extracted mozjpeg source directory. Found: ${candidates.join(', ')}`,
+    );
+    process.exit(1);
+  }
+}
+
+// step 2: build with CMake
+console.log('Building mozjpeg...');
+mkdirSync(buildDir, { recursive: true });
+
+const cmakeArgs = [
+  '-S',
+  srcDir,
+  '-B',
+  buildDir,
+  '-DCMAKE_BUILD_TYPE=Release',
+  '-DCMAKE_POSITION_INDEPENDENT_CODE=ON',
+  '-DCMAKE_POLICY_VERSION_MINIMUM=3.5',
+  '-DENABLE_STATIC=ON',
+  '-DENABLE_SHARED=OFF',
+  '-DPNG_SUPPORTED=OFF',
+  '-DWITH_TURBOJPEG=OFF',
+  `-DCMAKE_INSTALL_LIBDIR=${join(depsDir, 'lib')}`,
+  `-DCMAKE_INSTALL_PREFIX=${depsDir}`,
+];
+
+// force -fPIC on Linux
+if (process.platform === 'linux') {
+  cmakeArgs.push('-DCMAKE_C_FLAGS=-fPIC', '-DCMAKE_CXX_FLAGS=-fPIC');
+}
+
+// match node-gyp's deployment target on macOS to avoid linker warnings
+if (process.platform === 'darwin') {
+  cmakeArgs.push('-DCMAKE_OSX_DEPLOYMENT_TARGET=11.0');
+}
+
+// Windows multi-config generator
+if (process.platform === 'win32') {
+  cmakeArgs.push('-DCMAKE_MSVC_RUNTIME_LIBRARY=MultiThreaded');
+  cmakeArgs.splice(cmakeArgs.indexOf('-DCMAKE_BUILD_TYPE=Release'), 1);
+
+  // cross-compile for ARM64 when VCPKG_TARGET_TRIPLET indicates it
+  const triplet = process.env.VCPKG_TARGET_TRIPLET || '';
+  if (triplet.startsWith('arm64')) {
+    // use lowercase 'arm64' — mozjpeg's CMakeLists.txt checks
+    // CMAKE_GENERATOR_PLATFORM with a case-sensitive regex ("arm64")
+    cmakeArgs.push('-A', 'arm64');
+    cmakeArgs.push('-DNEON_INTRINSICS=ON');
+  }
+}
+
+execFileSync('cmake', cmakeArgs, { stdio: 'inherit' });
+
+const buildArgs = ['--build', buildDir, '--parallel'];
+if (process.platform === 'win32') {
+  buildArgs.push('--config', 'Release');
+}
+execFileSync('cmake', buildArgs, { stdio: 'inherit' });
+
+// step 3: install
+console.log('Installing to deps/mozjpeg...');
+const installArgs = ['--install', buildDir];
+if (process.platform === 'win32') {
+  installArgs.push('--config', 'Release');
+}
+execFileSync('cmake', installArgs, { stdio: 'inherit' });
+
+// verify installation
+if (!existsSync(join(depsDir, 'include', 'jpeglib.h'))) {
+  console.error('mozjpeg install failed: jpeglib.h not found');
+  process.exit(1);
+}
+
+// find the static library (varies by platform and install layout)
+const libDirs = ['lib', 'lib64'].map((d) => join(depsDir, d));
+const libNames = ['libjpeg.a', 'jpeg-static.lib', 'jpeg.lib'];
+let foundLib = false;
+for (const dir of libDirs) {
+  if (!existsSync(dir)) continue;
+  for (const name of libNames) {
+    if (existsSync(join(dir, name))) {
+      foundLib = true;
+      console.log(`Found static library: ${join(dir, name)}`);
+      break;
+    }
+  }
+  if (foundLib) break;
+}
+
+if (!foundLib) {
+  // list what we have for debugging
+  for (const dir of libDirs) {
+    if (existsSync(dir)) {
+      console.log(`Contents of ${dir}:`, readdirSync(dir));
+    }
+  }
+  console.error('mozjpeg install failed: static library not found');
+  process.exit(1);
+}
+
+// step 4: clean up source and build dirs
+rmSync(srcDir, { recursive: true, force: true });
+rmSync(buildDir, { recursive: true, force: true });
+
+console.log(`mozjpeg ${MOZJPEG_VERSION} installed to ${depsDir}`);

package/scripts/download-qpdf.mjs

@@ -88,24 +88,35 @@ if (process.platform === 'linux') {
   cmakeArgs.push('-DCMAKE_C_FLAGS=-fPIC', '-DCMAKE_CXX_FLAGS=-fPIC');
 }
 
-// on macOS, help CMake find Homebrew libjpeg-turbo
-if (process.platform === 'darwin') {
-  const brewPrefixes = ['/opt/homebrew', '/usr/local'];
-  for (const prefix of brewPrefixes) {
-    const jpegDir = join(prefix, 'opt', 'jpeg-turbo');
-    if (existsSync(jpegDir)) {
-      cmakeArgs.push(`-DCMAKE_PREFIX_PATH=${jpegDir}`);
-      break;
-    }
-    const jpegDir2 = join(prefix, 'opt', 'jpeg');
-    if (existsSync(jpegDir2)) {
-      cmakeArgs.push(`-DCMAKE_PREFIX_PATH=${jpegDir2}`);
-      break;
-    }
-  }
+// point QPDF at vendored mozjpeg
+const mozjpegDir = join(root, 'deps', 'mozjpeg');
+if (existsSync(join(mozjpegDir, 'include', 'jpeglib.h'))) {
+  // try lib/ then lib64/ (some CMake installs use lib64 on Linux)
+  const libDir = existsSync(join(mozjpegDir, 'lib')) ? 'lib' : 'lib64';
+  const libExt = process.platform === 'win32' ? 'jpeg-static.lib' : 'libjpeg.a';
+
+  // QPDF uses pkg_check_modules first, then falls back to find_path/find_library
+  // with custom variable names LIBJPEG_H_PATH and LIBJPEG_LIB_PATH.
+
+  // 1) set PKG_CONFIG_PATH so pkg-config finds mozjpeg's libjpeg.pc (Linux/macOS)
+  const pkgConfigDir = join(mozjpegDir, libDir, 'pkgconfig');
+  const existing = process.env.PKG_CONFIG_PATH || '';
+  process.env.PKG_CONFIG_PATH = existing ? `${pkgConfigDir}:${existing}` : pkgConfigDir;
+
+  // 2) set QPDF's cmake cache vars for the find_path/find_library fallback (Windows)
+  cmakeArgs.push(
+    `-DLIBJPEG_H_PATH:PATH=${join(mozjpegDir, 'include')}`,
+    `-DLIBJPEG_LIB_PATH:FILEPATH=${join(mozjpegDir, libDir, libExt)}`,
+  );
+
+  // 3) add mozjpeg to CMAKE_PREFIX_PATH as a belt-and-suspenders fallback
+  cmakeArgs.push(`-DCMAKE_PREFIX_PATH=${mozjpegDir}`);
+} else {
+  console.error('mozjpeg not found — run "node scripts/download-mozjpeg.mjs" first');
+  process.exit(1);
 }
 
-// on Windows, use vcpkg for zlib and libjpeg-turbo
+// on Windows, use vcpkg for zlib (mozjpeg is vendored separately)
 if (process.platform === 'win32') {
   const vcpkgRoot = process.env.VCPKG_ROOT || join(process.env.GITHUB_WORKSPACE || '', 'vcpkg');
   if (existsSync(join(vcpkgRoot, 'scripts', 'buildsystems', 'vcpkg.cmake'))) {
@@ -117,7 +128,7 @@ if (process.platform === 'win32') {
 
     // cross-compile for ARM64 when triplet indicates it
     if (triplet.startsWith('arm64')) {
-      cmakeArgs.push('-A', 'ARM64');
+      cmakeArgs.push('-A', 'arm64');
     }
   }
   // force static CRT (/MT) to match node-gyp
@@ -170,7 +181,7 @@ if (staticLibs.length === 0) {
   }
 }
 
-// step 4: on Windows, copy vcpkg zlib/jpeg static libs and headers for binding.gyp
+// step 4: on Windows, copy vcpkg zlib static lib and headers for binding.gyp
 if (process.platform === 'win32') {
   const triplet = process.env.VCPKG_TARGET_TRIPLET || `${process.arch}-windows-static`;
   const vcpkgRoot = process.env.VCPKG_ROOT || '';
@@ -180,27 +191,15 @@ if (process.platform === 'win32') {
     join(buildDir, 'vcpkg_installed', triplet, 'lib'),
     join(vcpkgRoot, 'installed', triplet, 'lib'),
   ];
-  const candidateIncludeDirs = [
-    join(buildDir, 'vcpkg_installed', triplet, 'include'),
-    join(vcpkgRoot, 'installed', triplet, 'include'),
-  ];
 
   const vcpkgLibDir = candidateLibDirs.find((d) => existsSync(d));
   if (vcpkgLibDir) {
-    for (const lib of ['zlib.lib', 'jpeg.lib', 'turbojpeg.lib']) {
-      const src = join(vcpkgLibDir, lib);
-      if (existsSync(src)) {
-        cpSync(src, join(depsDir, 'lib', lib));
-        console.log(`Copied vcpkg ${lib}`);
-      }
+    const src = join(vcpkgLibDir, 'zlib.lib');
+    if (existsSync(src)) {
+      cpSync(src, join(depsDir, 'lib', 'zlib.lib'));
+      console.log('Copied vcpkg zlib.lib');
     }
   }
-
-  const vcpkgIncludeDir = candidateIncludeDirs.find((d) => existsSync(d));
-  if (vcpkgIncludeDir) {
-    cpSync(vcpkgIncludeDir, join(depsDir, 'include'), { recursive: true, force: true });
-    console.log(`Copied vcpkg headers from ${vcpkgIncludeDir}`);
-  }
 }
 
 // step 5: clean up source and build dirs

package/scripts/install.mjs

@@ -96,6 +96,7 @@ async function tryDownload() {
 
 async function buildFromSource() {
   console.log('Building from source...');
+  execSync('node scripts/download-mozjpeg.mjs', { stdio: 'inherit', cwd: root });
   execSync('node scripts/download-qpdf.mjs', { stdio: 'inherit', cwd: root });
   execSync('npx node-gyp rebuild', { stdio: 'inherit', cwd: root });
   execSync('node scripts/bundle-lib.mjs', { stdio: 'inherit', cwd: root });

package/src/images.cc

@@ -391,7 +391,7 @@ void optimizeImages(QPDF &qpdf, const CompressOptions &opts) {
         return;
     }
 
-    // encode as JPEG via libjpeg-turbo
+    // encode as JPEG via mozjpeg
     std::vector<uint8_t> jpegData;
     if (!encodeJpeg(pixels, width, height, encodeComponents, opts.targetQuality,
                     jpegData))

package/src/jpeg.cc

@@ -55,6 +55,10 @@ static bool losslessJpegOptimizeImpl(const unsigned char *data, size_t size,
   jpeg_copy_critical_parameters(&srcinfo, &dstinfo);
   dstinfo.optimize_coding = TRUE;
 
+  // mozjpeg progressive scan optimization — lossless, reorders existing DCT
+  // coefficients into optimized progressive scans for better entropy coding
+  jpeg_simple_progression(&dstinfo);
+
   jpeg_write_coefficients(&dstinfo, coef_arrays);
   jpeg_finish_compress(&dstinfo);
   jpeg_finish_decompress(&srcinfo);
@@ -79,7 +83,7 @@ bool losslessJpegOptimize(const unsigned char *data, size_t size,
 }
 
 // ---------------------------------------------------------------------------
-// Lossy JPEG encoding via libjpeg-turbo
+// Lossy JPEG encoding via mozjpeg
 // ---------------------------------------------------------------------------
 
 // isolated setjmp scope
@@ -115,6 +119,16 @@ static bool encodeJpegImpl(const unsigned char *pixels, int width, int height,
   jpeg_set_quality(&cinfo, quality, TRUE);
   cinfo.optimize_coding = TRUE;
 
+  // mozjpeg trellis quantization — 5–15% smaller at same perceptual quality
+  jpeg_c_set_bool_param(&cinfo, JBOOLEAN_TRELLIS_QUANT, TRUE);
+  jpeg_c_set_bool_param(&cinfo, JBOOLEAN_TRELLIS_QUANT_DC, TRUE);
+  jpeg_c_set_bool_param(&cinfo, JBOOLEAN_OVERSHOOT_DERINGING, TRUE);
+  jpeg_c_set_bool_param(&cinfo, JBOOLEAN_USE_SCANS_IN_TRELLIS, TRUE);
+  jpeg_c_set_bool_param(&cinfo, JBOOLEAN_USE_LAMBDA_WEIGHT_TBL, TRUE);
+
+  // mozjpeg progressive scan optimization
+  jpeg_simple_progression(&cinfo);
+
   jpeg_start_compress(&cinfo, TRUE);
 
   int row_stride = width * components;

package/src/jpeg.h

@@ -21,7 +21,7 @@ void jpegErrorExit(j_common_ptr cinfo);
 bool losslessJpegOptimize(const unsigned char *data, size_t size,
                           std::vector<uint8_t> &out);
 
-// encodes raw pixels as JPEG at the given quality (1–100) via libjpeg-turbo
+// encodes raw pixels as JPEG at the given quality (1–100) via mozjpeg
 bool encodeJpeg(const unsigned char *pixels, int width, int height,
                 int components, int quality, std::vector<uint8_t> &out);