
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
@perfe/wml-cli
Advanced tools
web measure tool for enterprise application
lighthouse + chrome-launch
驱动装置(Driver)是 puppeteer 和 Chrome Debug Tool 的接口
采集器 (Gather)使用驱动装置获取页面信息。共有三类数据 artifacts.json-搜有采集信息 defaultPass.trace.json-大部分性能特征数据 defaultPass.devtoolslog.jso-开发工具事件日志包括网络请求、加载状态数据
审查器 评估测量数据,形成量化指标
报告生成装置 生成报告页面
节流设置
interface ThrottlingSettings {
/** The round trip time in milliseconds. */
rttMs?: number;
/** The network throughput in kilobits per second. */
throughputKbps?: number;
// devtools settings
/** The network request latency in milliseconds. */
requestLatencyMs?: number;
/** The network download throughput in kilobits per second. */
downloadThroughputKbps?: number;
/** The network upload throughput in kilobits per second. */
uploadThroughputKbps?: number;
// used by both
/** The amount of slowdown applied to the cpu (1/<cpuSlowdownMultiplier>). */
cpuSlowdownMultiplier?: number
}
npm run dev m https://www.baidu.com/ -- --settings.device desktop
>>>> False expression: Non-string value passed to ts.resolveTypeReferenceDirective
解决方式: npm install -g ts-node
注意 pure esm package https://gist.github.com/sindresorhus/a39789f98801d908bbc7ff3ecc99d99c
FAQs
网页性能评估 CLI
We found that @perfe/wml-cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.