
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
nextlevelpackage
Advanced tools
To get started, visit nextlevel-dash.com and create an account. After account creation, you will be navigated to an onboardingp page which will direct you to complete the below steps.
Install configure next.js bundle analyzer in your Next.js application
NPM install Next.js Bundle Analyzer:
npm install @next/bundle-analyzer
Configure next.config.mjs file:
import pkg from '@next/bundle-analyzer';
const withBundleAnalyzer = pkg({
enabled: process.env.ANALYZE === 'true',
});
const nextConfig = {};
export default withBundleAnalyzer(nextConfig);
Install and configure our npm package, NextLevelPackage, through the terminal. It can also be found here.
NPM Install NextLevelPackage:
npm install nextlevelpackage
Import NextLevelPackage in layout.js:
import NextWebVitals from 'nextlevelpackage';
Add NextWebVitals component in RootLayout body:
export default function RootLayout({ children }) {
return (
<html lang="en">
<body>
<NextWebVitals />
{children}
</body>
</html>
);
}
Configure yoour Environmental Variables
Add the following line to your .env.local file:
NEXT_PUBLIC_API_KEY=<your-api-key>
When you create an account, the setup page will provide you with your API key.
Add Build Script to package.json
Add the following script to your package.json:
"scripts": {
"nextlevelbuild": "node ./node_modules/nextlevelpackage/cli.js"
}
Run this build script instead of 'npm next build' to track metrics in the dashboard:
npm run nextlevelbuild
Navitage to your NextLevel dashboard to view tracked metrics!
Metrics displayed on the page include:
FAQs
this package will connect you to the nextlevel dashboard
The npm package nextlevelpackage receives a total of 1 weekly downloads. As such, nextlevelpackage popularity was classified as not popular.
We found that nextlevelpackage demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.