Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@bbc/fcpx-xml-composer
Advanced tools
work in progress
Convert a json sequence into an FCPX XML.
Inspired by EDL Composer on npm it uses the same schema to describe the sequence.
Part of the bbc/digital-paper-edit
project by BBC News Labs
cd, clone the repo, npm install
see example-usage.js
for how to requrie and use the module.
To run the example do node example-usage.js
When importing the .fcpxml
sequence in FCPX the media is going to be offline, to re-link the media go to Files
->
Relink Files
or see
see Re-link offline clips in FCPX, for more details.
npm install @bbc/fcpx-xml-composer
require or import in your code and see example usage for more details
A function that loop over the json sequence and using string interpolation creates an equivalent FCPX XML. With no dependencies.
Used the sequence form the docs - Listing 1-1 A library with a simple project as FCPXML
as a starting point.
FCPX seems particularly picky about specifying the correct frame rate for the clips in the sequence.
Relinked files must have the same media type, same frame rate, and similar audio channels as the original files, and must be long enough to cover all the clips that reference the files.
A Known limitation is that the EDL composer sequence only supports one track, as the EDL format is not multi track. FCPX sequence could allow multiple tracks. But for the current use case with digital-paper-edit
one track is sufficient. PRs might be considered to extend this module to multi track support.
6.1.0
NA
TBC
TBC - published to npm under @bbc/fcpx-xml-composer
offset
(in a way supported by FCPX XML) FAQs
Convert a json sequence into an FCPX XML.
We found that @bbc/fcpx-xml-composer demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 14 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.