Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
react-music-player
Advanced tools
A simple HTML5 music player with ReactJS and CSS3.
Modified version of react-cl-audio-player
npm install
npm run example
Then open localhost:8080
in a browser.
The easiest way to use react-music-player-player is to install it from NPM and include it in your own React build process (using Browserify, Webpack, etc).
You can also use the standalone build by including dist/ReactMusicPlayer.js
in your page. If you use this, make sure you have already included React, and it is available as a global variable.
npm install react-music-player --save
To use, just call the ReactMusicPlayer instance and render it.
import ReactMusicPlayer from 'react-music-player';
<ReactMusicPlayer songs={songs} autoplay />
var songs = [
{
url: 'path/to/mp3',
cover: 'path/to/jpeg',
artist: {
name: 'Metallica',
song: 'Fuel'
}
},
{
url: 'path/to/your/mp3',
artist: {
name: 'X Japan',
song: 'Art of Life'
}
}
];
Works perfectly in Chrome, Firefox and Safari. No test in IE.
src
and the build process)NOTE: The source code for the component is in src
. A UMD bundle is also built to dist
, which can be included without the need for any build system.
To build and serve the examples, run npm run build
, npm run example
.
MIT License.
Copyright (c) 2015 smronju.
FAQs
HTML5 music player for react lovers.
We found that react-music-player demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.