
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@stormstreaming/stormplayer-react
Advanced tools
Dedicated React wrapper for Storm Player UI and Storm Player Core
This package has been renamed to @stormstreaming/player-react.
Please update your dependencies:
npm uninstall @stormstreaming/stormplayer-react
npm install @stormstreaming/player-react
Storm Player React is part of the new Storm Player ecosystem:
@stormstreaming/player-core@stormstreaming/player-ui@stormstreaming/player-reactThis repository contains the legacy React component and is kept for reference only.
Storm JavaScript Player – React Component is a legacy React wrapper around Storm Player UI and Storm Library.
It requires a Storm Streaming Server instance or Storm Cloud subscription.
npm install @stormstreaming/stormplayer-react
yarn add @stormstreaming/stormplayer-react
Storm Player relies on browser APIs such as window and HTMLVideoElement.
For SSR frameworks (e.g. Next.js), server-side rendering must be disabled.
Example:
import dynamic from "next/dynamic";
const StormPlayer = dynamic(
() => import("@stormstreaming/stormplayer-react"),
{ ssr: false }
);
Usage:
{typeof window !== "undefined" && (
<StormPlayer
playerConfig={{
containerID: "player1",
width: "100%",
height: "100%",
title: "Your streaming video title",
subtitle: "Subtitle for your video"
}}
libraryConfig={STORM_LIBRARY_CONFIG}
/>
)}
Older browsers fall back to HLS mode.
See LICENSE.txt.
FAQs
Dedicated React wrapper for Storm Player UI and Storm Player Core
The npm package @stormstreaming/stormplayer-react receives a total of 31 weekly downloads. As such, @stormstreaming/stormplayer-react popularity was classified as not popular.
We found that @stormstreaming/stormplayer-react demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.