
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
simple-m3u-parser
Advanced tools
Parses simple M3U/M3U8 playlist files and returns JavaScript objects.
This is a simple JavaScript library for parsing M3U playlist files. It includes two classes: MediaPlaylist
for parsing entire M3U files and MediaPlaylistItem
for parsing individual items within the playlist.
npm install simple-m3u-parser
import { MediaPlaylist } from "simple-m3u-parser";
import fs from "fs";
// Example: Read M3U file as Uint8Array
const fileData = fs.readFileSync("example.m3u");
const playlist = new MediaPlaylist(fileData);
// Access playlist items
console.log(playlist.playlist_items);
import { MediaPlaylistItem } from "simple-m3u-parser";
// Example: Create a MediaPlaylistItem
const itemInfo = "#EXTINF:180,Song 1\nhttp://example.com/song1.mp3";
const playlistItem = new MediaPlaylistItem(itemInfo);
// Access properties of the playlist item
console.log(playlistItem.name);
console.log(playlistItem.duration);
console.log(playlistItem.uri);
console.log(playlistItem.attributes);
MediaPlaylistItem
name
: Name of the media item.duration
: Duration of the media item in seconds.uri
: Location of the media file.attributes
: Additional attributes defined in the #EXTINF tag.MediaPlaylist
playlist_items
: An array of MediaPlaylistItem
objects representing the items in the playlist.This project is licensed under the ISC License - see the LICENSE file for details.
FAQs
Parses simple M3U/M3U8 playlist files and returns JavaScript objects.
The npm package simple-m3u-parser receives a total of 1 weekly downloads. As such, simple-m3u-parser popularity was classified as not popular.
We found that simple-m3u-parser demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.