
Security News
The Nightmare Before Deployment
Season’s greetings from Socket, and here’s to a calm end of year: clean dependencies, boring pipelines, no surprises.
@twilio/webrtc
Advanced tools
twilio-webrtc.js contains the various WebRTC shims used by twilio-video.js. It is not intended for general consumption.
npm install --save @twilio/webrtc
The following WebRTC API shims are available:
const {
getStats,
getUserMedia,
MediaStream,
MediaStreamTrack,
RTCIceCandidate,
RTCPeerConnection,
RTCSessionDescription
} = require('@twilio/webrtc');
getStats resolves with normalized WebRTC statistics for the active ICE
candidate pair and each MediaStreamTrack, local or remote, of a particular
RTCPeerConnection.
/**
* Get the statistics for a given RTCPeerConnection.
* @param {RTCPeerConnection} peerConnection
* @returns {Promise<StandardizedStatsResponse>}
*/
function getStats(peerConnection) {}
NOTE: StandardizedStatsResponse
normalizes the different formats of the stats returned by RTCPeerConnection#getStats in different
browsers. It does not conform to the W3C spec.
getUserMedia accepts a MediaStreamConstraints object and resolves
with a MediaStream. By default, it requests both audio and video.
/**
* Request media from the user.
* @param {MediaStreamConstraints} [constraints={audio: true, video: true}]
* @returns {Promise<MediaStream>}
*/
function getUserMedia(constraints) {}
RTCPeerConnection abstracts away some of the browser-specific implementations
of WebRTC, and implements some WebRTC features that are not present in some
browsers.
MediaStreamTrack changes, the
browser treats this as a removal of the existing MediaStreamTrack and the addition of a new
MediaStreamTrack.maxPacketLifeTime on RTCDataChannels by
remapping the legacy property maxRetransmitTime to maxPacketLifeTime. See
this bug for
more information.removeTrack
with an RTCRtpSender that is not created by the RTCPeerConnection in question throws an exception.setLocalDescription and setRemoteDescription in
have-local-offer and have-remote-offer signaling states respectively.createOffer in signaling state have-local-offer.RTCPeerConnection.prototype.peerIdentity is accessed.MediaStreamTrack changes, the
browser treats this as a removal of the existing MediaStreamTrack and the addition of a new
MediaStreamTrack.addTrack method does not return the RTCRtpSender associated with the added track.RTCSessionDescription abstracts away some of the browser-specific implementations
of WebRTC for Firefox and Safari, and works around this bug
in Chrome, where the native RTCSessionDescription constructor throws when its argument is
{ type: 'rollback'}.
MediaStream, MediaStreamTrack, and RTCIceCandidate abstracts away their
browser-prefixed counterparts for earlier browser versions.
FAQs
WebRTC-related APIs and shims used by twilio-video.js
The npm package @twilio/webrtc receives a total of 11,799 weekly downloads. As such, @twilio/webrtc popularity was classified as popular.
We found that @twilio/webrtc demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Season’s greetings from Socket, and here’s to a calm end of year: clean dependencies, boring pipelines, no surprises.

Research
/Security News
Impostor NuGet package Tracer.Fody.NLog typosquats Tracer.Fody and its author, using homoglyph tricks, and exfiltrates Stratis wallet JSON/passwords to a Russian IP address.

Security News
Deno 2.6 introduces deno audit with a new --socket flag that plugs directly into Socket to bring supply chain security checks into the Deno CLI.