
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
youtubedl-core
Advanced tools
A lightweight and easy-to-use library for downloading videos from YouTube, powered by YouTube-DL and developed by the Eternity Community.
To install youtubedl-core, simply run the following command:
npm install youtubedl-core
To download a video, import the youtubedl-core library and use the download
function:
const youtubedl = require('youtubedl-core');
youtubedl.download('https://www.youtube.com/watch?v=dQw4w9WgXcQ')
.then(info => {
console.log('Download complete');
})
.catch(err => {
console.error(err);
});
You can also pass options to the download function, such as specifying the video quality or format:
const youtubedl = require('youtubedl-core');
const options = {
quality: 'highest',
format: 'mp4'
};
youtubedl.download('https://www.youtube.com/watch?v=dQw4w9WgXcQ', options)
.then(info => {
console.log('Download complete');
})
.catch(err => {
console.error(err);
});
For more information on the available options, see the YouTube-DL documentation.
youtubedl-core is developed by the Eternity Community, a group of developers dedicated to creating high-quality open source software. We believe that software should be accessible to everyone, and strive to make our projects as user-friendly and easy-to-use as possible.
If you're interested in contributing to youtubedl-core or any of our other projects, please visit our GitHub organization and check out the contribution guidelines. We welcome all contributions, big and small!
FAQs
YouTube video downloader by Eternity Community.
We found that youtubedl-core demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.