
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
adviser-plugin-lighthouse
Advanced tools
Plugin for adviser to run lighthouse audits and score checking on a given URL
You'll first need to install Adviser:
$ npm i adviser --save-dev
Next, install adviser-plugin-lighthouse:
$ npm install adviser-plugin-lighthouse --save-dev
Note: If you installed Adviser globally (using the -g flag) then you must also install adviser-plugin-lighthouse globally.
Add lighthouse to the plugins section of your .adviserrc configuration file. You can omit the adviser-plugin- prefix:
{
"plugins": ["lighthouse"]
}
Then configure the rules you want to use under the rules section.
{
"rules": {
"lighthouse/scores": [
"error",
{
"best-practices": 1,
"pwa": 0.8,
"seo": 1,
"accessibility": 1,
"performance": 0.9
}
],
}
}
If you don't have a .adviserrc you can create one running $ adviser --init
{
"plugins": ["lighthouse"],
"rules": {
"lighthouse/scores": [
"error",
{
"best-practices": 1,
"pwa": 1,
"seo": 1,
"accessibility": 1,
"performance": 1
}
],
"lighthouse/audits": [
"error",
{
"mainthread-work-breakdown": 1,
"not-a-valid-audit": 1
}
]
}
}
If you would like to contribute and later on test your changes there are a couple ways explained below.
The package (adviser-plugin-lighthouse) is setup to run tests under the folder __tests__ with Jest. Save your tests there and they will run before each code push and by travis once the PR is created.
To run your rules with adviser, we recommend you to create an empty folder (We have one under ./examples/integration) with:
adviser configuration file. You can grab the example in this README or generate one using $ adviser --init (adviser must be installed globally or using npx)$ npm link in the adviser-plugin-lighthouse root$ npm link adviser-plugin-lighthouse in the example project rootPlease read CONTRIBUTING.md for details on our code of conduct, and the process for submitting pull requests.
FAQs
Plugin for adviser to run lighthouse audits on a given URL
The npm package adviser-plugin-lighthouse receives a total of 2 weekly downloads. As such, adviser-plugin-lighthouse popularity was classified as not popular.
We found that adviser-plugin-lighthouse demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.