Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
instagram-screen-scrape
Advanced tools
A tool for scraping public data from Instagram, without needing to get permission from Instagram. It can (theoretically) scrape anything that a non-logged-in user can see. But, right now it only supports getting posts for a given username.
The CLI operates entirely over STDOUT, and will output posts as it scrapes them. The following example is truncated because the output of the real command is obviously very long... it will end with a closing bracket (making it valid JSON) if you see the full output.
$ instagram-screen-scrape --username carrotcreative
[{"id":"0toxcII4Eo","username":"carrotcreative","time":1427420497,"type":"image","like":82,"comment":3,"text":"Our CTO, @kylemac, speaking on the #LetsTalkCulture panel tonight @paperlesspost.","image":"https://scontent.cdninstagram.com/hphotos-xaf1/t51.2885-15/e15/11055816_398297847022038_803876945_n.jpg"},
{"id":"0qPcnuI4Pr","username":"carrotcreative","time":1427306556,"type":"image","like":80,"comment":4,"text":"#bitchesbebakin took it to another level today for @nporteschaikin and @slang800's #Carrotversaries today.","image":"https://scontent.cdninstagram.com/hphotos-xaf1/t51.2885-15/e15/10959049_1546104325652055_1320782099_n.jpg"},
{"id":"0WLnjlo4Ft","username":"carrotcreative","time":1426633460,"type":"image","like":61,"comment":1,"text":"T-shirts speak louder than words. Come find us @sxsw.","image":"https://scontent.cdninstagram.com/hphotos-xfa1/t51.2885-15/e15/11032904_789885121108568_378908081_n.jpg"},
By default, there is 1 line per post, making it easy to pipe into other tools. The following example uses wc -l
to count how many posts are returned. As you can see, I don't post much.
$ instagram-screen-scrape -u slang800 | wc -l
2
The following example is in CoffeeScript.
InstagramPosts = require 'instagram-screen-scrape'
# create the stream
streamOfPosts = new InstagramPosts(username: 'slang800')
# do something interesting with the stream
streamOfPosts.on('readable', ->
# since it's an object-mode stream, we get objects from it and don't need to
# parse JSON or anything.
post = streamOfPosts.read()
# the time field is represented in UNIX time
time = new Date(post.time * 1000)
# output something like "slang800's post from 4/5/2015 got 1 like(s), and 0
# comment(s)"
console.log "slang800's post from #{time.toLocaleDateString()} got
#{post.like} like(s), and #{post.comment} comment(s)"
)
The following example is the same as the last one, but in JavaScript.
var InstagramPosts, streamOfPosts;
InstagramPosts = require('instagram-screen-scrape');
streamOfPosts = new InstagramPosts({
username: 'slang800'
});
streamOfPosts.on('readable', function() {
var post, time;
post = streamOfPosts.read();
time = new Date(post.time * 1000);
console.log([
"slang800's post from ",
time.toLocaleDateString(),
" got ",
post.like,
" like(s), and ",
post.comment,
" comment(s)"
].join(''));
});
The fact that Instagram requires an app to be registered just to access the data that is publicly available on their site is excessively controlling. Scripts should be able to consume the same data as people, and with the same level of authentication. Sadly, Instagram doesn't provide an open, structured, and machine readable API.
So, we're forced to use a method that Instagram cannot effectively shut down without harming themselves: scraping their user-facing site.
FAQs
scrape public instagram data w/out API access
We found that instagram-screen-scrape demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.