
Research
/Security News
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.
@mediabunny/flac-encoder
Advanced tools
No browser currently supports FLAC encoding in their WebCodecs implementations. This extension package provides a reliable FLAC encoder for use with Mediabunny. It is implemented using Mediabunny's custom coder API and uses a fast, size-optimized WASM build of libFLAC under the hood.
This package, like the rest of Mediabunny, is enabled by its sponsors and their donations. If you've derived value from this package, please consider leaving a donation! 💘
This library peer-depends on Mediabunny. Install both using npm:
npm install mediabunny @mediabunny/flac-encoder
Alternatively, directly include them using a script tag:
<script src="mediabunny.js"></script>
<script src="mediabunny-flac-encoder.js"></script>
This will expose the global objects Mediabunny and MediabunnyFlacEncoder. Use mediabunny-flac-encoder.d.ts to provide types for these globals. You can download the built distribution files from the releases page.
import { registerFlacEncoder } from '@mediabunny/flac-encoder';
registerFlacEncoder();
That's it - Mediabunny now uses the registered FLAC encoder automatically.
If you want to be more correct, check for native browser support first:
import { canEncodeAudio } from 'mediabunny';
import { registerFlacEncoder } from '@mediabunny/flac-encoder';
if (!(await canEncodeAudio('flac'))) {
registerFlacEncoder();
}
Here, we convert an input file to a FLAC file:
import {
Input,
ALL_FORMATS,
BlobSource,
Output,
BufferTarget,
FlacOutputFormat,
canEncodeAudio,
Conversion,
} from 'mediabunny';
import { registerFlacEncoder } from '@mediabunny/flac-encoder';
if (!(await canEncodeAudio('flac'))) {
registerFlacEncoder();
}
const input = new Input({
source: new BlobSource(file), // From a file picker, for example
formats: ALL_FORMATS,
});
const output = new Output({
format: new FlacOutputFormat(),
target: new BufferTarget(),
});
const conversion = await Conversion.init({
input,
output,
});
await conversion.execute();
output.target.buffer; // => ArrayBuffer containing the FLAC file
For more ways of using Mediabunny, refer to its guide.
For simplicity, all built WASM artifacts are included in the repo, since these rarely change. However, here are the instructions for building them from scratch:
Install Emscripten, install CMake, and clone libFLAC. Then, from the Mediabunny root and with Emscripten sourced in:
export FLAC_PATH=/path/to/flac
export MEDIABUNNY_ROOT=$PWD
cd $FLAC_PATH
mkdir -p build && cd build
emcmake cmake .. \
-DBUILD_PROGRAMS=OFF \
-DBUILD_CXXLIBS=OFF \
-DBUILD_EXAMPLES=OFF \
-DBUILD_TESTING=OFF \
-DWITH_OGG=OFF \
-DBUILD_SHARED_LIBS=OFF \
-DENABLE_MULTITHREADING=OFF \
-DINSTALL_MANPAGES=OFF \
-DCMAKE_C_FLAGS="-DNDEBUG -Oz -flto -msimd128"
emmake make
# Compile the bridge between JavaScript and libFLAC's API
cd $MEDIABUNNY_ROOT/packages/flac-encoder
emcc src/bridge.c \
$FLAC_PATH/build/src/libFLAC/libFLAC.a \
-I$FLAC_PATH/include \
-s MODULARIZE=1 \
-s EXPORT_ES6=1 \
-s SINGLE_FILE=1 \
-s ALLOW_MEMORY_GROWTH=1 \
-s ENVIRONMENT=web,worker \
-s FILESYSTEM=0 \
-s MALLOC=emmalloc \
-s SUPPORT_LONGJMP=0 \
-s EXPORTED_RUNTIME_METHODS=cwrap,HEAPU8 \
-s EXPORTED_FUNCTIONS=_malloc,_free \
-msimd128 \
-flto \
-Oz \
-o build/flac.js
This generates build/flac.js, which contains both the JavaScript "glue code" as well as the compiled WASM inlined.
Then, the complete JavaScript package can be built alongside the rest of Mediabunny by running npm run build in Mediabunny's root.
FAQs
FLAC encoder extension for Mediabunny, based on libFLAC.
The npm package @mediabunny/flac-encoder receives a total of 795,210 weekly downloads. As such, @mediabunny/flac-encoder popularity was classified as popular.
We found that @mediabunny/flac-encoder demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.