
Security News
Rust RFC Proposes a Security Tab on crates.io for RustSec Advisories
Rustâs crates.io team is advancing an RFC to add a Security tab that surfaces RustSec vulnerability and unsoundness advisories directly on crate pages.
@afiniti/video-player-lite
Advanced tools
Lightweight React video player module built for vimeo, this is a wrapper on plyr.io with added funtionality.
npm i @afiniti/video-player-lite
| Name | Type | Description |
|---|---|---|
poster | string | poster url given in a string |
vimeoId | string | vimeo video id |
videoSlug | string | video slug |
videoTitle | string | title to display on video |
isFloating | bool | Show floating video on scroll or not. Defaults to true |
playFullScreen | bool | Play video full screen or not. Defaults to false |
openInModal | bool | Play video in a modal append in root. Defaults to false |
playCallback | method | Action to perform on video play button |
closeCallback | method | Action to perform on video close button |
The package can be integrated inside a react component as follows:
install plyr 3.6.8 in your project
import React from 'react';
// @dependencies
import PlayerComponent from 'js/VideoPlayerLite';
// @import styles
import styles from './index.module.scss';
const Home = () => {
return (
<div className={styles.homeContainer}>
<PlayerComponent
vimeoId="546466644"
isFloating={true}
poster="http://media.graphcms.com/m2Mm6haVT3iKaT2VUZJQ"
playFullScreen={false}
videoTitle="The History of AI"
/>
</div>
);
};
export default Home;
add cdn link in server.js or index.html
<link rel="stylesheet" href="https://cdn.plyr.io/3.6.8/plyr.css" />
FAQs
React component for playing videos
The npm package @afiniti/video-player-lite receives a total of 6 weekly downloads. As such, @afiniti/video-player-lite popularity was classified as not popular.
We found that @afiniti/video-player-lite demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Rustâs crates.io team is advancing an RFC to add a Security tab that surfaces RustSec vulnerability and unsoundness advisories directly on crate pages.

Security News
/Research
Socket found a Rust typosquat (finch-rust) that loads sha-rust to steal credentials, using impersonation and an unpinned dependency to auto-deliver updates.

Research
/Security Fundamentals
A pair of typosquatted Go packages posing as Googleâs UUID library quietly turn helper functions into encrypted exfiltration channels to a paste site, putting developer and CI data at risk.