
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Welcome to UpkeepJS: React video built for the mobile world. UpkeepJS is designed for frontend developers seeking a lightweight solution to mobile video.
Install upkeep-js and peer dependencies via NPM:
npm install --save upkeep-js react react-dom prop-types styled-components
Import the UpkeepVideo component, then provide props according to the following specifications:
src = 'string'
// Required - provides the uri of the video to be loaded.
// Accepts local filepaths and externally hosted videos.
width = 'string'
// Optional - provides width of the player.
// Height is automatically adjusted based on the video's dimensions.
For example:
import React from 'react';
import UpkeepVideo from 'upkeep-js';
export default props => {
return (
<div>
<h1>New Video</h1>
<UpkeepVideo
src='https://media.w3.org/2010/05/sintel/trailer_hd.mp4'
width='200px'
/>
</div>
);
};
Find UpkeepJS on GitHub
Travis Frank - Initial Author - TravisFrankMTG
This project is licensed under the MIT License
FAQs
React video built for the mobile world
We found that upkeep-js demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.