
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
yt-dlp-exec-fork
Advanced tools
this is just a fork from youtube-dl-exec so it will use yt-dlp instead of youtube-dl
A simple Node.js wrapper for youtube-dl.
youtube-dl version available.$ npm install youtube-dl-exec --save
const youtubedl = require('youtube-dl-exec')
youtubedl('https://example.com', {
dumpSingleJson: true,
noWarnings: true,
noCallHome: true,
noCheckCertificate: true,
preferFreeFormats: true,
youtubeSkipDashManifest: true,
referer: 'https://example.com'
})
.then(output => console.log(output))
It's equivalent to:
$ youtube-dl https://example.com --dump-single-json --no-warnings --no-call-home --no-check-certificate --prefer-free-formats --youtube-skip-dash-manifest --referer=https://example.com
The library will use the latest youtube-dl available that will downloaded on build time.
Alternatively, you can specify your own binary path using .create:
const { create: createYoutubeDl } = require('youtube-dl-exec')
const youtubedl = createYoutubeDl('/my/binary/path')
You can combine it with YOUTUBE_DL_SKIP_DOWNLOAD. See environment variables to know more.
It execs any youtube-dl command, returning back the output.
Required
Type: string
The URL to target.
Type: object
Any flag supported by youtube-dl.
Any option provided here will passed to execa#options.
Similar to main method but instead of a parsed output, it will return the internal subprocess object
const youtubedl = require('youtube-dl-exec')
const fs = require('fs')
const subprocess = youtubedl.exec('https://example.com', { dumpSingleJson: true })
console.log(`Running subprocess as ${subprocess.pid}`)
subprocess.stdout.pipe(fs.createWriteStream('stdout.txt'))
subprocess.stderr.pipe(fs.createWriteStream('stderr.txt'))
setTimeout(subprocess.cancel, 30000)
It creates a youtube-dl using the binaryPath provided.
The environment variables are taken into account when you perform a npm install in a project that contains youtube-dl-exec dependency.
These environment variables can also be set through "npm config", for example npm install --YOUTUBE_DL_HOST="Some URL", or store it in .npmrc file.
They setup the download configuration for getting the youtube-dl binary file.
These variables can be
It determines the remote URL for getting the youtube-dl binary file.
The default URL is ytdl-org/youtube-dl latest release.
It determines the folder where to put the binary file.
The default folder is bin.
It determines the binary filename.
The default binary file could be youtube-dl or youtube-dl.exe, depending of the YOUTUBE_DL_PLATFORM value.
It determines the architecture of the machine that will use the youtube-dl binary.
The default value will computed from process.platform, being 'unix' or 'win32'.
When is present, it will skip the postinstall script for fetching the latest youtube-dl version.
That variable should be set before performing the installation command, such as:
YOUTUBE_DL_SKIP_DOWNLOAD=true npm install
youtube-dl-exec © microlink.io, released under the MIT License.
Authored and maintained by Kiko Beats with help from contributors.
microlink.io · GitHub microlink.io · Twitter @microlinkhq
FAQs
this is just a fork from youtube-dl-exec so it will use yt-dlp instead of youtube-dl
The npm package yt-dlp-exec-fork receives a total of 0 weekly downloads. As such, yt-dlp-exec-fork popularity was classified as not popular.
We found that yt-dlp-exec-fork demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.