Probably not best practice, but I automatically check Block Common Exploits and Web Sockets every time because I’m lazy. Works every time.

Not sure what Cache Asset does, but I can guess from the name. I leave this one off because my NPM runs on a VM with not much storage