
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
sunmoon-player
Advanced tools
A lightweight and sophisticated React-based H5 video player
简体中文 | English
Qier-player is a web video player component for React, It has a simple interface and smooth operation which supports the most functions of other video players. In addition, Qier-player can switch between video resolutions (4K, 2K, 1080P, 720P and 480P) if desired.
For these to work, the player must be in focus.
Up arrow key: Volume upDown arrow key: Volume downLeft arrow key: Rewind 3 secondsRight arrow key: Skip forward 3 secondsSpace key: Toggle play/pauseHere is an official demo site showing the player in use.

npm install --save qier-player
import React from 'react';
import ReactDOM from 'react-dom';
import QierPlayer from 'qier-player';
ReactDOM.render(<QierPlayer srcOrigin="Your video addedress" />, document.getElementById('root'));
| Parameter | Description | Types | Defaults |
|---|---|---|---|
| width | setting the video width (e.g. 740 or "100%") | number | string | 740 |
| height | setting the video height (e.g. 420 or "100%") | number | string | 420 |
language | language: 'en' is English and 'zh' is Chinese | "en" | "zh" | 'en' |
themeColor | theme color (only supports hexadecimal color) | string | '#f23300' |
src480p | 480p source URL | boolean | string | false |
src1080p | 1080p source URL | boolean | string | false |
src720p | 720p source URL | boolean | string | false |
src2k | 2K source URL | boolean | string | false |
src4k | 4K source URL | boolean | string | false |
srcOrigin | origin source URL (set this if not using specific resolution sources) | boolean | string | false |
FAQs
A multifunctional and beautiful React-based web video player.
We found that sunmoon-player demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.