
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
A youtube downloader written in Javascript. To be used with the command line. If you're looking to use it in your node program, check out ytdl-core.
Streams to stdout by default
ytdl "http://www.youtube.com/watch?v=_HSylqgVYQI" | mpv -
To save to a file
ytdl "http://www.youtube.com/watch?v=_HSylqgVYQI" > myvideo.mp4
or
ytdl -o "{author.name} - {title}" "http://www.youtube.com/watch?v=_HSylqgVYQI"
Download video and convert to mp3 (Requires ffmpeg)
ytdl http://www.youtube.com/watch?v=_HSylqgVYQI | ffmpeg -i pipe:0 -b:a 192K -vn myfile.mp3
Supported options
Usage: ytdl <url> [options]
url URL to the video.
Options:
-v, --version Print program version.
-q ITAG, --quality ITAG Video quality to download, default: highest
-r INT-INT, --range INT-INT Byte range to download, ie 10355705-12452856
-b INT, --begin INT Time to begin video, format by 1:30.123 and 1m30s
-o FILE, --output FILE Save to file, template by {prop}, default: stdout
--filter STR Can be video, videoonly, audio, audioonly
--filter-container REGEXP Filter in format container
--unfilter-container REGEXP Filter out format container
--filter-resolution REGEXP Filter in format resolution
--unfilter-resolution REGEXP Filter out format resolution
--filter-encoding REGEXP Filter in format encoding
--unfilter-encoding REGEXP Filter out format encoding
-i, --info Print video info without downloading
-j, --info-json Print video info as JSON without downloading
--print-url Print direct download URL
--no-cache Skip file cache for html5player
--debug Print debug information
npm -g install ytdl
Tests are written with mocha
npm test
FAQs
A command line streaming youtube video downloader.
The npm package ytdl receives a total of 240 weekly downloads. As such, ytdl popularity was classified as not popular.
We found that ytdl demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.