
Security News
CVE Volume Surges Past 48,000 in 2025 as WordPress Plugin Ecosystem Drives Growth
CVE disclosures hit a record 48,185 in 2025, driven largely by vulnerabilities in third-party WordPress plugins.
grunt-penthouse
Advanced tools
A grunt plugin based on Penthouse that extracts critical path css to increase page speed rendering
Install the plugin
npm install grunt-penthouse --save-dev
Once the plugin has been installed, it may be enabled inside your Gruntfile with this line of JavaScript:
grunt.loadNpmTasks('grunt-penthouse');
In your project's Gruntfile, add a section named penthouse to the data object
passed into grunt.initConfig().
grunt.initConfig({
penthouse: {
extract : {
outfile : '.tmp/out.css',
css : './dist/css/full.css',
url : 'http://localhost:9000',
width : 1300,
height : 900,
skipErrors : false // this is the default
},
},
});
See the setup in the Gruntfile for this plugin for an example setup of how one can use
this plugin with the connect plugin to automatically extract critical css as a step
in an automatic build process.
The resulting css file needs to be embedded in the head of the html files you are serving
to your clients. This can either be done dynamically at runtime
(e.g. include in your index.php file), or as a part of your build process -
building it into your html files. One plugin that can help you achieve this is
the grunt-codekit plugin
See its README for an example on how to achieve this.
skipErrors option. Range version for Penthouse.FAQs
Grunt plugin for extracting critical path css
The npm package grunt-penthouse receives a total of 138 weekly downloads. As such, grunt-penthouse popularity was classified as not popular.
We found that grunt-penthouse demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
CVE disclosures hit a record 48,185 in 2025, driven largely by vulnerabilities in third-party WordPress plugins.

Security News
Socket CEO Feross Aboukhadijeh joins Insecure Agents to discuss CVE remediation and why supply chain attacks require a different security approach.

Security News
Tailwind Labs laid off 75% of its engineering team after revenue dropped 80%, as LLMs redirect traffic away from documentation where developers discover paid products.