
Security News
Google’s OSV Fix Just Added 500+ New Advisories — All Thanks to One Small Policy Change
A data handling bug in OSV.dev caused disputed CVEs to disappear from vulnerability feeds until a recent fix restored over 500 advisories.
build-start-rebuild-perf
Advanced tools
Measures web app performance metrics: - Dev server startup time - Time to first paint - Time to app load (waiting for an element selector) - Reload time after a file changes
Measures web app performance metrics:
Thanks to Discourse for providing inspiration for this script.
pnpm dlx build-start-rebuild-perf [options]
# assuming running in an Ember project with a <img class="logo" /> in the app layout
pnpm dlx build-start-rebuild-perf --file "app/router.js" --wait-for ".logo"
-u, --url <url> URL to load (default: "http://localhost:4200")
-f, --file <path> File to touch to trigger a reload (no default, but app/router.js is an option)
-c, --command <cmd> Command to start dev server (default: "pnpm start")
-w, --wait-for <selector> Element selector to wait for (default: "body")
-t, --timeout <timeout ms> number of ms to wait for the server to become ready (default: "120000")
--page-load-timeout <timeout ms> number of ms to wait in the browser for the pageload event (default: "60000")
-l, --log-level <level> Set the log level (choices: "log", "warn", "error")
-h, --help display help for command
# Performance Results
| Dev Server Ready | First Paint | App Loaded | Reload after change |
| ---------------- | ----------- | ---------- | ------------------- |
| 5,523 ms | 5,618 ms | 6,142 ms | 918 ms |
Assuming you're in an Ember project and wondering if moving to Vite from the old Ember CLI is worth it, here's how you can use the script to create useful numbers:
main
branch or anywhwere you're still using Ember CLI with Webpack and Embroidernode_modules
pnpm install
to reinstall dependenciesbuild-start-rebuild-perf
once to get numbers for a cold startbuild-start-rebuild-perf
again to measure a warm startvite
branch where you enabled the new Vite based EmbroiderShare a your results with the Ember Initiative via email, or Mastodon, or Bluesky.
This project is part of the Ember Initative. It is developed by and © Mainmatter GmbH and contributors. It is released under the MIT License.
FAQs
Measures web app performance metrics: - Dev server startup time - Time to first paint - Time to app load (waiting for an element selector) - Reload time after a file changes
The npm package build-start-rebuild-perf receives a total of 4 weekly downloads. As such, build-start-rebuild-perf popularity was classified as not popular.
We found that build-start-rebuild-perf demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A data handling bug in OSV.dev caused disputed CVEs to disappear from vulnerability feeds until a recent fix restored over 500 advisories.
Research
/Security News
175 malicious npm packages (26k+ downloads) used unpkg CDN to host redirect scripts for a credential-phishing campaign targeting 135+ organizations worldwide.
Security News
Python 3.14 adds template strings, deferred annotations, and subinterpreters, plus free-threaded mode, an experimental JIT, and Sigstore verification.