Research
Security News
Malicious PyPI Package ‘pycord-self’ Targets Discord Developers with Token Theft and Backdoor Exploit
Socket researchers uncover the risks of a malicious Python package targeting Discord developers.
broccoli-viz
Advanced tools
npm install -g broccoli-viz
Generate a heimdall-compatible JSON from an ember build.
BROCCOLI_VIZ=1 ember build
# produces broccoli-viz.0.json
BROCCOLI_VIZ=1 ember serve
# produces broccoli-viz.{buildNumber}.json for each build
Produce a graphviz dot file from this JSON
broccoli-viz broccoli-viz.0.json > broccoli-viz.0.dot
Produce a PDF of this graph using graphviz (requires graphviz to be installed)
dot -Tpdf broccoli-viz.0.dot > broccoli-viz.0.pdf
You can then explore the PDF to see where time is being spent on your build.
If you want to show stats other than, or in addition to, the time stats, you can
pass a --stats
option one or more times. These are simple glob patterns
matched against the full stats key.
If no --stats
option is passed, the default is --stats=time.self --stats=time.total
Examples:
# Show time stats and individual fs counts
broccoli-viz --stats='time.*' --stats='fs.*.count' broccoli-viz.0.json > broccoli-viz.0.dot
# Show time stats and lstat, mkdir counts
broccoli-viz --stats='time.*' --stats='fs.lstatSync.count' --stats='fs.mkdirSync.count' broccoli-viz.0.json > broccoli-viz.0.dot
# Show all stats
broccoli-viz --stats='*' broccoli-viz.0.json > broccoli-viz.0.dot
If you want to render only a subtree, --root-id=:id
where :id
is the id of the
root of the subgraph we wish to render
If no --root-id
option is passed, the full graph is rendered
Examples:
# only renders 255 and its descendents
broccoli-viz --root-id=255 broccoli-viz.0.json > broccoli-viz.0.dot
FAQs
`npm install -g broccoli-viz`
The npm package broccoli-viz receives a total of 1,448 weekly downloads. As such, broccoli-viz popularity was classified as popular.
We found that broccoli-viz demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover the risks of a malicious Python package targeting Discord developers.
Security News
The UK is proposing a bold ban on ransomware payments by public entities to disrupt cybercrime, protect critical services, and lead global cybersecurity efforts.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.