Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
gulp-sitespeedio
Advanced tools
gulp-sitespeedio is a gulp.js task for testing your site against web performance best practice rules, fetch timings from a browser, test and enforce performance budgets, send performance metrics to Graphite using sitespeed.io.
Check out the documentation to get a full overview of what you can do and test using sitespeed.io.
If you haven't used gulp before, be sure to check out the Getting Started guide, as it explains how to create a gulpfile.js as well as install and use gulp plugins. Once you're familiar with that process, you may install this plugin with this command:
npm install gulp-sitespeedio --save-dev
Once the plugin has been installed, it may be enabled inside your gulpfile with this line of JavaScript:
var sitespeedio = require('gulp-sitespeedio');
To start testing pages, you must configure either a start URL for your crawl (yep sitespeed.io will crawl your site for a configurable depth) or an array of specific URL's that you want to test.
Crawl the site with depth 1.
{
urls: ['http://localhost/'],
}
{
urls: ['https://www.sitespeed.io', 'https://www.sitespeed.io/faq/']
}
With these configuration properties set, you can add sitespeedio
to your default tasks list. That'll look something like this:
gulp.task('default', ['jshint', 'sitespeedio']);
If you run it with custom options you need to run like this:
gulp.task('default', function (done) {
sitespeedio({
urls: ["http://localhost:3000/"],
})(done)
});
With this in place, gulp-sitespeedio will now collect performance metrics for your site.
The result files will automatically be stored in a temporary directory. If you want to change that, use the resultBaseDir property, like this:
{
url: 'https://www.sitespeed.io',
outputFolder: '/my/new/dir/'
}
Fetch timings, sending performance metrics to Graphite and performance budgets.
You can choose to collect Navigation Timing and User Timing metrics using real browser. You can choose by using Firefox or Chrome. And you can configure the connection speed (more info by choosing between mobile3g, mobile3gfast, cable and native. And choose how many times you want to test each URL (default is 3).
You surely want to combine it with running Xvfb to avoid opening the browser.
{
urls: ['https://www.sitespeed.io', 'https://www.sitespeed.io/faq/'],
browsertime: {
browser: 'firefox'
connectivity: 'cable',
iterations: 5,
}
}
Test your site against a performance budget. You can test your site against almost all data collected by sitespeed.io.
Checkout the example Gruntfile and budget looks something like this:
budget: {
"browsertime.pageSummary": [{
"metric": "statistics.timings.firstPaint.median",
"max": 1000
}, {
"metric": "statistics.visualMetrics.FirstVisualChange.median",
"max": 1000
}],
"coach.pageSummary": [{
"metric": "advice.performance.score",
"min": 75
}, {
"metric": "advice.info.domElements",
"max": 200
}, {
"metric": "advice.info.domDepth.max",
"max": 10
}, {
"metric": "advice.info.iframes",
"max": 0
}, {
"metric": "advice.info.pageCookies.max",
"max": 5
}],
"pagexray.pageSummary": [{
"metric": "transferSize",
"max": 100000
}, {
"metric": "requests",
"max": 20
}, {
"metric": "missingCompression",
"max": 0
}, {
"metric": "contentTypes.css.requests",
"max": 1
}, {
"metric": "contentTypes.image.transferSize",
"max": 100000
}, {
"metric": "documentRedirects",
"max": 0
}]
}
If you want to include/exclude tests in the output, you can switch that by a gulp config like:
{
urls: ['https://www.sitespeed.io', 'https://www.sitespeed.io/faq/'],
showFailedOnly: true // or false
}
sitespeed.io is highly configurable. The gulp-sitespeedio plugin will pass every option to sitespeed, you can see each and every configuration here. Each option needs to be called with full name (meaning the same as using -- for the cli. Say for example that don't need the screenshot for each. Using the cli, you add the flag --browsertime.screenshot false
Doing the same with the gulp plugin:
{
url: 'https://www.sitespeed.io',
browsertime: {
screenshot: false
}
}
FAQs
Analyze the web performance of your site using Gulp
The npm package gulp-sitespeedio receives a total of 54 weekly downloads. As such, gulp-sitespeedio popularity was classified as not popular.
We found that gulp-sitespeedio demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.