
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Simple API Project for NodeJS written in TypeScript inspired by sigma67's python library
These instructions will get you a copy of the project up and running on your local machine for development.
Clone github repo
$ git clone https://github.com/vladdenisov/ytmusic-api
Install dependencies
$ npm i
Build it
$ npm run build
You will see dist
folder, where all built files are stored.
Get the auth cookie from requests to YTMusic in your browser:
cookie
from Request Headers
Import lib to your code:
const { YTMUSIC } = require('ytmusic')
// or if you build it yourself
const { YTMUSIC } = require('path/to/ytmusic/dist/index.js')
Create new Instance of api with your cookie:
const api = new YTMUSIC("cookie")
// or if you want it to use not default account, specify userID (refer to docs to get it):
const api = new YTMUSIC("cookie", "userID")
Use it:
const data = await api.getPlaylist('RDCLAK5uy_k1Wu8QbZASiGVqr1wmie9NIYo38aBqscQ')
console.log(data.title)
// { text: '80s Pop-Rock Anthems' }
Please read CONTRIBUTING.md for details on our code of conduct, and the process for submitting pull requests to us.
Just contribute <3
We use SemVer for versioning. For the versions available, see the tags on this repository.
See also the list of contributors who participated in this project.
This project is licensed under the MIT License - see the LICENSE file for details
FAQs
Unofficial Youtube Music Api
The npm package ytmusic receives a total of 13 weekly downloads. As such, ytmusic popularity was classified as not popular.
We found that ytmusic demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.