
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
ffmpeg-static-electron-forge
Advanced tools
This module is designed for fast integration with electron forge and webpack.
This library is a module designed for fast integration with Electron Forge and Webpack. With this library, you can use the ffmpeg video conversion tool statically in your Electron applications.
To install this library, run the following command in your terminal:
npm install ffmpeg-static-electron-forge
You can import and use the library as follows: This is an example of a preproject configuration but it is not 100% necessary that you use it pay special attention to the plugin and the asar config. It is important that the last plugin in your list is this one or at least after WebpackPlugin.
// in forge.config.ts
import type { ForgeConfig } from "@electron-forge/shared-types";
import { MakerSquirrel } from "@electron-forge/maker-squirrel";
import { MakerZIP } from "@electron-forge/maker-zip";
import { MakerDeb } from "@electron-forge/maker-deb";
import { MakerRpm } from "@electron-forge/maker-rpm";
import { WebpackPlugin } from "@electron-forge/plugin-webpack";
import FFmpegStatic from "ffmpeg-static-electron-forge";
import { mainConfig } from "./webpack.main.config";
import { rendererConfig } from "./webpack.renderer.config";
import path from "path";
import os from "os";
const config: ForgeConfig = {
packagerConfig: {
asar: {
unpack: "{*.exe,*.dll,*.node,ffmpeg,ffprobe}",
},
appVersion: "1.0.0",
appCopyright: "Copyright (c) Cismu, inc. All rights reserved.",
executableName: "Cismu",
name: "Cismu",
},
rebuildConfig: {},
makers: [
new MakerSquirrel({}),
new MakerZIP({}, ["darwin"]),
new MakerRpm({}),
new MakerDeb({}),
],
plugins: [
new WebpackPlugin({
mainConfig,
devContentSecurityPolicy: "connect-src 'self' \* 'unsafe-eval'",
renderer: {
config: rendererConfig,
entryPoints: [
{
html: "./src/cismu/ui/index.html",
js: "./src/renderer.ts",
name: "main_window",
preload: {
js: "./src/preload.ts",
},
},
],
},
}),
new FFmpegStatic({
platform: os.platform(),
arch: process.arch,
path: "C:\\Users\\Undead34\\Documents\\Undead34\\Cismu-Desktop\\.webpack\\main",
}),
],
};
export default config;
License This library is available under the MIT license. You can see the license terms in the LICENSE file of this repository.
FAQs
This module is designed for fast integration with electron forge and webpack.
The npm package ffmpeg-static-electron-forge receives a total of 700 weekly downloads. As such, ffmpeg-static-electron-forge popularity was classified as not popular.
We found that ffmpeg-static-electron-forge demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.