
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
floating-live
Advanced tools
一个用于处理和保存直播弹幕的 Web 小工具,开箱即用。
本体无弹幕获取功能,需要配合floating-live-plugins中的插件使用。
目前插件库支持 bilibili 和 AcFun 的直播弹幕,不同平台的弹幕会转换为同一种格式便于保存。
项目仍在开发中,功能尚未完善,目前除了记录保存直播弹幕外暂时没有别的用处啦,敬请期待。
注意:当前项目未进入正式版本阶段,程序结构及导出数据结构可能随时改动,非常不建议用于正式项目中。
GUI 版本:Minteea/floating-live-gui
npm install floating-live
// 导入FloatingLive本体
import { FloatingLive } from "floating-live";
// 导入bilibili房间生成插件
import bilibili from "@floating-live/bilibili";
// 创建一个FloatingLive实例
const live = new FloatingLive();
// 注册插件
live.plugin.register(bilibili);
// 添加房间并自动打开
live.room.add("bilibili", 6, true);
FAQs
一个用于处理和保存直播弹幕的 Web 小工具,开箱即用。
The npm package floating-live receives a total of 37 weekly downloads. As such, floating-live popularity was classified as not popular.
We found that floating-live demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.