
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
@site-os/check
Advanced tools
OSS SEO checker for static sites and CI pipelines (forked from @capgo/seo-checker, extended with remote URL crawling and dashboard integration)
Fork notice. This package is a hard fork of Cap-go/seo-checker by Capgo (MIT, with permission), used as the foundation for siteOS. Upstream remains the canonical static SEO checker; this fork extends it with remote URL crawling, a local server spawn mode, and dashboard integration. See LICENSE for dual copyright.
OSS SEO checker for static sites and CI pipelines. Performs comprehensive SEO analysis with ~250 wired
rules (from a catalog of 1274 — see CHECKS.md for the live list) covering metadata,
content quality, accessibility, structured data, and more. The static --dist mode
inherited from upstream is preserved; remote URL crawling and --start modes are being added on top.
Inspired by Ahrefs SEO Audit and Lighthouse SEO audits.
npm install @site-os/check
# or
bun add @site-os/check
# Run with default settings (scans ./dist)
npx @site-os/check
# Specify dist path
npx @site-os/check --dist ./build
# Output as JSON
npx @site-os/check --output json
# Generate a sample config file
npx @site-os/check --generate-config
| Option | Description | Default |
|---|---|---|
--dist <path> | Path to dist folder | ./dist |
--config <path> | Path to config file | siteos-check.config.json |
--output <format> | Output format: console, json, sarif, github | console |
--report <path> | Path to write report file | - |
--fail-on <level> | Fail on: error, warning, notice | error |
--max-issues <n> | Maximum issues before stopping | 0 (unlimited) |
--generate-config | Generate a sample config file | - |
Create a siteos-check.config.json file:
{
"distPath": "./dist",
"baseUrl": "https://example.com",
"languages": ["en", "es", "fr"],
"defaultLanguage": "en",
"rules": {
"disabled": ["SEO00186", "SEO00189"],
"severityOverrides": {
"SEO00135": "notice"
}
},
"exclusions": [
{
"ruleId": "SEO00147",
"filePath": "404.html",
"reason": "404 page intentionally has broken link examples"
}
],
"failOn": ["error"],
"maxIssues": 0,
"outputFormat": "console"
}
import {
checkDuplicates,
printReport,
runPageChecks,
scanDistFolder
} from '@site-os/check'
const config = {
distPath: './dist',
baseUrl: 'https://example.com',
languages: ['en'],
defaultLanguage: 'en',
}
// Scan the dist folder
const siteData = await scanDistFolder(config)
// Run checks on each page
const issues = []
for (const page of siteData.pages.values()) {
issues.push(...runPageChecks(page, config, siteData))
}
// Check for duplicates
issues.push(...checkDuplicates(siteData, config))
console.log(`Found ${issues.length} SEO issues`)
The checker wires ~250 rules (exact list in CHECKS.md, generated from the catalog's
wired flag) across these categories:
Colored terminal output grouped by category with severity indicators.
Machine-readable JSON with all issues and statistics.
Static Analysis Results Interchange Format for CI/CD integration.
GitHub Actions workflow commands format. Issues appear as annotations in the PR/commit view.
# Use in GitHub Actions
npx @site-os/check --output github
Example workflow:
- name: SEO Check
run: npx @site-os/check --output github --fail-on error,warning
MIT — see LICENSE for dual copyright (Capgo for original work, Vincent Ventalon for modifications).
FAQs
OSS SEO checker for static sites and CI pipelines (forked from @capgo/seo-checker, extended with remote URL crawling and dashboard integration)
The npm package @site-os/check receives a total of 8 weekly downloads. As such, @site-os/check popularity was classified as not popular.
We found that @site-os/check demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.