
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
hexo-live-photo
Advanced tools
A lightweight and easy-to-use Hexo plugin for elegantly displaying Live Photos (dynamic photos) and similar animated images taken by devices like iPhone, Android, etc., in blog posts.
Today's smartphones (such as iPhone's Live Photo and similar features on some Android devices) can capture dynamic photos, recording approximately 3 seconds of dynamic video and audio before and after the shot. However, when we deploy blog posts to static websites, these dynamic photos are often degraded to static JPEG images, losing their vivid core experience.
Hexo-live-photo is a plugin born to solve this problem. It parses Live Photo resources (a .jpg image and a .mp4 video) and utilizes HTML5 video playback technology to perfectly restore the playback effect of dynamic photos without affecting page loading performance, making your memories more vivid.
Execute the following command in the root directory of your Hexo blog:
npm install hexo-live-photo --save
Add the following options to the main configuration file _config.yml of Hexo:
livephoto:
enable: true
autoplay: true
hover_to_play: true
click_to_play: true
lazy_load: true
threshold: 0.8
badge: true
badge_text: 'Live'
badge_position: 'bottom-left'
loading_animation: true
preload: 'auto'
keep_observing: false
hover_delay: 300
weixin_disable_autoplay: true
Use the {% live_photo %} tag anywhere in your Markdown articles (.md files) where you need to insert dynamic photos.
Basic syntax:
{% livephoto image_path video_path %}
Welcome to submit Issues and Pull Requests!
MIT
If this plugin has helped you, please give a star ⭐. If you encounter any issues during use, please submit Issues.
FAQs
A Hexo plugin for displaying Live Photos with hover/click activation
The npm package hexo-live-photo receives a total of 5 weekly downloads. As such, hexo-live-photo popularity was classified as not popular.
We found that hexo-live-photo demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.