
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
gulp-sitespeedio
Advanced tools
gulp-sitespeedio is a gulp.js task for testing your site against web performance best practice rules, fetch timings from a browser, test and enforce performance budgets, send performance metrics to Graphite using sitespeed.io.
Check out the documentation to get a full overview of what you can do and test using sitespeed.io.
If you haven't used gulp before, be sure to check out the Getting Started guide, as it explains how to create a gulpfile.js as well as install and use gulp plugins. Once you're familiar with that process, you may install this plugin with this command:
npm install gulp-sitespeedio --save-dev
Once the plugin has been installed, it may be enabled inside your gulpfile with this line of JavaScript:
var sitespeedio = require('gulp-sitespeedio');
To start testing pages, you must configure either a start URL for your crawl (yep sitespeed.io will crawl your site for a configurable depth) or an array of specific URL's that you want to test.
Crawl the site with depth 1.
{
urls: ['http://localhost/'],
}
{
urls: ['https://www.sitespeed.io', 'https://www.sitespeed.io/faq/']
}
With these configuration properties set, you can add sitespeedio
to your default tasks list. That'll look something like this:
gulp.task('default', ['jshint', 'sitespeedio']);
If you run it with custom options you need to run like this:
gulp.task('default', function (done) {
sitespeedio({
urls: ["http://localhost:3000/"],
})(done)
});
With this in place, gulp-sitespeedio will now collect performance metrics for your site.
The result files will automatically be stored in a temporary directory. If you want to change that, use the resultBaseDir property, like this:
{
url: 'https://www.sitespeed.io',
outputFolder: '/my/new/dir/'
}
Fetch timings, sending performance metrics to Graphite and performance budgets.
You can choose to collect Navigation Timing and User Timing metrics using real browser. You can choose by using Firefox or Chrome. And you can configure the connection speed (more info by choosing between mobile3g, mobile3gfast, cable and native. And choose how many times you want to test each URL (default is 3).
You surely want to combine it with running Xvfb to avoid opening the browser.
{
urls: ['https://www.sitespeed.io', 'https://www.sitespeed.io/faq/'],
browsertime: {
browser: 'firefox'
connectivity: 'cable',
iterations: 5,
}
}
Test your site against a performance budget. You can test your site against almost all data collected by sitespeed.io.
Checkout the example Gruntfile and budget looks something like this:
budget: {
"browsertime.pageSummary": [{
"metric": "statistics.timings.firstPaint.median",
"max": 1000
}, {
"metric": "statistics.visualMetrics.FirstVisualChange.median",
"max": 1000
}],
"coach.pageSummary": [{
"metric": "advice.performance.score",
"min": 75
}, {
"metric": "advice.info.domElements",
"max": 200
}, {
"metric": "advice.info.domDepth.max",
"max": 10
}, {
"metric": "advice.info.iframes",
"max": 0
}, {
"metric": "advice.info.pageCookies.max",
"max": 5
}],
"pagexray.pageSummary": [{
"metric": "transferSize",
"max": 100000
}, {
"metric": "requests",
"max": 20
}, {
"metric": "missingCompression",
"max": 0
}, {
"metric": "contentTypes.css.requests",
"max": 1
}, {
"metric": "contentTypes.image.transferSize",
"max": 100000
}, {
"metric": "documentRedirects",
"max": 0
}]
}
If you want to include/exclude tests in the output, you can switch that by a gulp config like:
{
urls: ['https://www.sitespeed.io', 'https://www.sitespeed.io/faq/'],
showFailedOnly: true // or false
}
sitespeed.io is highly configurable. The gulp-sitespeedio plugin will pass every option to sitespeed, you can see each and every configuration here. Each option needs to be called with full name (meaning the same as using -- for the cli. Say for example that don't need the screenshot for each. Using the cli, you add the flag --browsertime.screenshot false
Doing the same with the gulp plugin:
{
url: 'https://www.sitespeed.io',
browsertime: {
screenshot: false
}
}
FAQs
Analyze the web performance of your site using Gulp
The npm package gulp-sitespeedio receives a total of 17 weekly downloads. As such, gulp-sitespeedio popularity was classified as not popular.
We found that gulp-sitespeedio demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.