
Security News
Node.js Drops Bug Bounty Rewards After Funding Dries Up
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.
把apng动图转成视频,依赖ffmpeg
npm i -s apng2video
在项目根目录新建文件.npmrc,内容如下:
registry=https://registry.npmmirror.com
canvas_binary_host_mirror=https://registry.npmmirror.com/-/binary/canvas
const apng2video = require('apng2video')
const fs = require('fs')
async function main() {
const chip = fs.readFileSync('./chip.png')
const video = await apng2video(
chip, // 文件buffer
{ command: ['libvpx-vp9', '-lossless', 1], extname: 'webm' }, // command 为 ffmpeg 末尾定义需要转换的格式;extname是文件的扩展名
{ ffmpegPath: 'ffmpeg', ffprobePath: 'ffprobe', tempPath: './temp', skipInfo: false } // ffmpeg 和 ffprobe 如果配置了全局变量了,则可以不配置路径;tempPath 可以不配置;skipInfo 是否跳过更多信息检测
)
fs.writeFileSync('./test.webm', video.file)
}
main()
FAQs
apng2video is a tool for convert Animated PNG to Video
We found that apng2video demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.