
Research
Malicious Go “crypto” Module Steals Passwords and Deploys Rekoobe Backdoor
An impersonated golang.org/x/crypto clone exfiltrates passwords, executes a remote shell stager, and delivers a Rekoobe backdoor on Linux.
@ematipico/js-performance
Advanced tools
A collection of utilities to measure the performance of your application
JavaScript performance is a collection of utilities that can help you to give information about the performance of your application.
Bear in mind that this is not a jsperf sibling, but it's more focused on something else.
The library is simply a easy way to take advantage of the browser API performance
The browser API performance is useful but it takes a bit to understand the APIs and make an effective use inside your application.
The aim of the library is just to give few functions with almost zero learning curve.
Just run the following command
npm install --save @ematipico/js-performance
Import the library in the way of prefer most, from your browser
<script src='path/to/js.performance.umd.js'></script>
<script>
JSPerf.startRecording()
// etc.
</script>
Or straight inside your modules if you are using bundler such as webpack or rollup
import { startRecording } from 'js-perf'
startRecording()
// etc.
The library doesn't support Node.js environments for obvious reasons, as it doesn't have a performance API.
The following example will use ES6 modules and it will be really simple
import { startRecording, startMark, stopMark, stopRecording, allMeasures } from 'js-perf'
startRecording()
startMark('firstLoop')
for (let i = 0; i < 100; i++) {
// operation
}
stopMark('firstLoop')
startMark('secondLoop')
for (let i = 0; i < 100; i++) {
// operation
}
stopMark('secondLoop')
stopRecording()
allMeasures() // this will print inside your console the results of your marks
It's easy!
Note: at the moment the library does not support having two marks with the same name
That means that executing the following code won't work
import { startRecording, startMark, stopMark, stopRecording } from 'js-perf'
startRecording()
startMark('operation')
startMark('operation')
// expensive operation
stopMark('operation')
stopMark('operation')
stopRecording()
The result will be just ONE mark called 'operation'
A list of available APIs is here
FAQs
A collection of utilities to measure the performance of your application
We found that @ematipico/js-performance demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
An impersonated golang.org/x/crypto clone exfiltrates passwords, executes a remote shell stager, and delivers a Rekoobe backdoor on Linux.

Security News
npm rolls out a package release cooldown and scalable trusted publishing updates as ecosystem adoption of install safeguards grows.

Security News
AI agents are writing more code than ever, and that's creating new supply chain risks. Feross joins the Risky Business Podcast to break down what that means for open source security.