Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
docpad-plugin-chrometimeline
Advanced tools
Chrome timeline generator that records events from Docpad events
Generates a chrome timeline log for specified docpad events that can then be loaded in to the chrome dev timeline tool. Log files are generated in the root of docpad under /chrometimeline by default
plugins:
chrometimeline:
# default output path relative to the docpad root path
timelinePath: "chrometimeline"
# default events that this plugin records
events: [
{start: 'render', marker: 'trigger'}
{start: 'renderDocument', marker: 'trigger'}
{start: 'generateBefore', end:'generateAfter', marker: 'trigger'}
{start: 'parseBefore', end:'parseAfter'}
{start: 'populateCollectionsBefore', end:'populateCollections'}
{start: 'contextualizeBefore', end:'contextualizeAfter'}
{start: 'renderBefore', end:'renderAfter'}
{start: 'renderCollectionBefore', end:'renderCollectionAfter'}
{start: 'writeBefore' end:'writeAfter'}
{start: 'serverBefore', end:'serverAfter'}
]
There are two type's of markers:
trigger
marker that is fired once per event. marker: "trigger"
with the start: {{evenName}}
property (see above config examples)
Duration events must specify both start and end properties.
i.e. {start: 'renderBefore', end:'renderAfter'}
All end events are triggers, there is no way to change this at present.
All events capture the heap size at the time they are fired.
##Example output
https://developers.google.com/chrome-developer-tools/docs/timeline#timeline_panel_overview
You may experience the odd issue with the timeline as it can be a bit buggy (even when viewing chrome's recorded logs)
You can discover the history inside the History.md
file
You can discover the contributing instructions inside the Contributing.md
file
Licensed under the incredibly permissive MIT License
Copyright © 2013+ Stringz Solutions Ltd
Copyright © 2013+ Peter Flannery
FAQs
Chrome timeline generator that records events from Docpad events
We found that docpad-plugin-chrometimeline demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.