Probably not best practice, but I automatically check Block Common Exploits and Web Sockets every time because I'm lazy. Works every time.
Not sure what Cache Asset does, but I can guess from the name. I leave this one off because my NPM runs on a VM with not much storage
Yeah I dont see your picture :(