Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
pdplayerkit
Advanced tools
FlexPlyr is a lightweight JavaScript library that provides embedded HTML5 video players and YouTube players, featuring highly customizable control panels and visual effects.
(Previously known as PDPlayerKit, renamed to FlexPlyr starting from version 2.2.4
)
Modular JavaScript Media Player
Supports HTML5, YouTube, Vimeo with flexible themes and a complete control panel.
playsinline
and fullscreen mode toggle support.npm i @pardnchiu/flexplyr
FlexPlyr
library
<!-- Version 2.2.4 and above -->
<script src="https://cdn.jsdelivr.net/npm/@pardnchiu/flexplyr@[VERSION]/dist/FlexPlyr.js"></script>
<!-- Version 2.2.3 and below -->
<script src="https://cdn.jsdelivr.net/npm/pdplayerkit@[VERSION]/dist/PDPlayerKit.js"></script>
// Version 2.2.4 and above
import { FPlyr } from "https://cdn.jsdelivr.net/npm/@pardnchiu/flexplyr@[VERSION]/dist/FlexPlyr.esm.js";
// Version 2.2.3 and below
import { player } from "https://cdn.jsdelivr.net/npm/pdplayerkit@[VERSION]/dist/PDPlayerKit.module.js";
FPlyr
// Version 2.2.4 and above
// Unified: FPlyr
// Version 2.2.3 and below
// IIFE: PDPlayer
// ESM: player
const dom = new FPlyr({
// Optional: Specify the element to replace with the player (element ID)
// If not specified, manually append dom.body to the view
// id: "element ID",
// Required: Media source configuration, choose one of the options below
video: "[video source]",
// audio: "[audio source]",
// vimeo: "[Vimeo ID]",
// youtube: "[YouTube ID]"
// Optional: Playback settings
option: {
// Whether to show the slider, default is true
showThumb: true,
// Control panel style, e.g., "minimal" or "classic"
panelType: "[style choice]",
// Control panel buttons, choose functions to display
panel: [
"play", "progress", "time", "timeMini",
"volume", "volumeMini", "rate", "full"
],
// Default volume level
volume: 100,
// Default mute setting
mute: false
},
// Optional: Event listeners to monitor specific events during playback
when: {
ready: function () {
console.log("Player is ready");
},
playing: function () {
console.log("Playing");
},
pause: function () {
console.log("Paused");
},
end: function () {
console.log("Playback ended");
},
destroyed: function () {
console.log("Player removed");
}
}
});
// If no element is specified, manually append the player to the DOM
(...).appendChild(dom.body);
// Remove the component
// dom.destroy();
This project is licensed under the MIT License.
©️ 2023 邱敬幃 Pardn Chiu
FAQs
FlexPlyr is a lightweight JavaScript library that provides embedded HTML5 video players and YouTube players, featuring highly customizable control panels and visual effects.
The npm package pdplayerkit receives a total of 192 weekly downloads. As such, pdplayerkit popularity was classified as not popular.
We found that pdplayerkit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.