
Research
PyPI Package Disguised as Instagram Growth Tool Harvests User Credentials
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
gatsby-plugin-ffmpeg
Advanced tools
Wrapper of the FFMPEG video manipulation library for Gatsby plugins
This is a low level helper plugin for video transcoding with ffmpeg.
You generally shouldn't need to use this. You're most likely looking for gatsby-remark-videos if you want to automatically convert videos in your markdown, or gatsby-transformer-ffmpeg if you're looking to use these videos elsewhere in your website
Works with Gatsby v4.
npm install --save gatsby-plugin-ffmpeg
ffmpeg with the correct codecs is also required.
With Homebrew 2.0.3/ffmpeg 4.1.1 ffmpeg options are no longer available on the default tap.
From https://trac.ffmpeg.org/wiki/CompilationGuide/macOS
The following will install ffmpeg.
brew tap varenc/ffmpeg
brew install ffmpeg $(brew options ffmpeg --compact)
Running with the environment variable DEBUG_FFMPEG=true
will print the ffmpeg arguments used.
info ffmpeg is being executed with args: -i ~/markdown-pages/video.mp4 -y -an -vcodec libx264 -b:v 100k -filter:v
scale=w=1206:h=480 -profile:v main -pix_fmt yuv420p -movflags faststart
Work on gatsby-plugin-ffmpeg
is funded by Electric UI. If you need to design an Arduino GUI, want visualisations for a complex robotics system or generally need a user interface for your hardware project, please take a look at the website.
FAQs
Wrapper of the FFMPEG video manipulation library for Gatsby plugins
The npm package gatsby-plugin-ffmpeg receives a total of 36 weekly downloads. As such, gatsby-plugin-ffmpeg popularity was classified as not popular.
We found that gatsby-plugin-ffmpeg demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A deceptive PyPI package posing as an Instagram growth tool collects user credentials and sends them to third-party bot services.
Product
Socket now supports pylock.toml, enabling secure, reproducible Python builds with advanced scanning and full alignment with PEP 751's new standard.
Security News
Research
Socket uncovered two npm packages that register hidden HTTP endpoints to delete all files on command.