Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Video.js is an open source library for working with video on the web, also known as an HTML video player.
This gem bundles the upstream distribution for use with the Ruby on Rails framework. The version number of the gem always tracks the upstream javascript release and the gem itself doesn't provide any additional methods or helpers. If a need for helpers arises in the future they will be developed as a separate gem with this one as its dependency. Should a gem bug be discovered an additional version identifier will be appended and incremented after the upstream version number.
The gem is developed and tested against Rails 5
videojs-ng and changes made to videojs required for rails are licensed under ISC.
The original videojs code distributed with this gem is licensed under Apache 2 You can find the videojs license file in the vendor directory, changes made to the original code base are as follows:
video-lang.js
to optionally load all existing language filesvideojs-ie8.js
to video-ie8.js
video.novtt.js
to video-novtt.js
video-js.css
to video.css.erb
video-js-cdn.css
to video-cdn.css
video-js.css
was changed to load assets via rails asset_path
Add this line to your application's Gemfile:
gem 'videojs-ng'
And then execute:
$ bundle
Or install it yourself as:
$ gem install videojs-ng
include the stylesheet in application.css file:
*= require video
and be sure to include the static assets in config/initializers/assets.rb
Rails.application.config.assets.precompile += %w( VideoJS.eot VideoJS.svg VideoJS.ttf VideoJS.woff )
*= require video-cdn
Add the following directive to your JavaScript manifest file (application.js):
//= require video
By default videojs ships with Apache 2 licensed vtt.js use the novtt include in application.js if you want to avoid it:
//= require video-novtt
If you happen to need ie8 support include (application.js):
//= require video-ie8
Video.js includes localization support to present text in a language other than the default English where appropriate.
You can add the language you need to support by requiring it in your application.js:
//= require video-lang/es
If you want to load all existing supported languages require just video-lang in application.js:
//= require video-lang
Bug reports and pull requests are welcome on GitHub at https://github.com/koparo/videojs-ng.
FAQs
Unknown package
We found that videojs-ng demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.