Gathering detailed insights and metrics for ffmpeg-ffprobe-static
Gathering detailed insights and metrics for ffmpeg-ffprobe-static
Installations
npm install ffmpeg-ffprobe-staticScore
69
Supply Chain
87.6
Quality
86.1
Maintenance
100
Vulnerability
80.9
License
Releases
23
Release refs/tags/b6.1.2-rc.1
b6.1.2-rc.1
Published on 29 Oct 2024
Release refs/tags/b7.1.0-rc.1
b7.1.0-rc.1
Published on 24 Oct 2024
Release refs/tags/b5.1.0-rc.1
b5.1.0-rc.1
Published on 22 Aug 2024
Release refs/tags/b5.1-rc.1
b5.1-rc.1
Published on 22 Aug 2024
Release refs/tags/b6.1.1-rc.5
b6.1.1-rc.5
Published on 24 Jul 2024
Release refs/tags/b6.1.1-rc.4
b6.1.1-rc.4
Published on 24 Jul 2024
Developer
descriptinc
Developer Guide
BETA
Module System
CommonJS
Min. Node Version
>=10
Typescript Support
Yes
Node Version
18.20.4
NPM Version
10.7.0
Statistics
18 Stars
131 Commits
6 Forks
2 Watching
10 Branches
74 Contributors
Updated on 13 Nov 2024
Languages
JavaScript (64.56%)
Shell (35.44%)
Total Downloads
Cumulative downloads
Total Downloads
373,514
Last day
-53.8%
432
Compared to previous day
Last week
-21.6%
4,031
Compared to previous week
Last month
84%
26,158
Compared to previous month
Last year
42.4%
138,965
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dev Dependencies
2
Versions
ffmpeg-static
ffmpeg static binaries for Mac OSX, Linux, Windows and FreeBSD.
Supports macOS (64-bit and arm64), Linux (32 and 64-bit, armhf, arm64), Windows (32 and 64-bit) and FreeBSD (64-bit). The ffmpeg version currently used is 4.4.
Note: The version of ffmpeg-static follows SemVer. When releasing new versions, we do not consider breaking changes in ffmpeg itself, but only the JS interface (see below). To stop ffmpeg-static from breaking your code by getting updated, lock the version down or use a lockfile.
Installation
This module is installed via npm:
1$ npm install ffmpeg-static
Note: During installation, it will download the appropriate ffmpeg binary from the b4.4 GitHub release. Use and distribution of the binary releases of FFmpeg are covered by their respective license.
Electron & other cross-platform packaging tools
Because ffmpeg-static will download a binary specific to the OS/platform, you need to purge node_modules before (re-)packaging your app for a different OS/platform (read more in #35).
Example Usage
Returns the path of a statically linked ffmpeg binary on the local filesystem.
1var pathToFfmpeg = require('ffmpeg-static'); 2console.log(pathToFfmpeg);
/Users/j/playground/node_modules/ffmpeg-static/ffmpeg
Check the example script for a more thorough example.
Sources of the binaries
The build script downloads binaries from these locations:
- Windows x64 builds
- Windows x86 builds
- Linux builds
- macOS builds for Intel / for ARM (Apple Silicon)
- FreeBSD builds
The build script extracts build information and (when possible) the license file from the downloaded package or the distribution server. Please consult the individual build's project site for exact source versions, which you can locate based on the version information included in the README file.
Show your support
This npm package includes statically linked binaries that are produced by the following individuals. Please consider supporting and donating to them who have been providing quality binary builds for many years:
- Windows builds: Jaex
- Linux builds: John Van Sickle
- macOS builds: Helmut K. C. Tessarek
Building the project
The unzip, tar CLI executables need to be installed. On macOS, use brew install gnu-tar xz.
No vulnerabilities found.
Reason
no binaries found in the repo
Reason
no dangerous workflow patterns detected
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Warn: project license file does not contain an FSF or OSI license.
Reason
5 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7
Reason
0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Reason
Found 1/18 approved changesets -- score normalized to 0
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-binaries.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/descriptinc/ffmpeg-ffprobe-static/release-binaries.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-binaries.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/descriptinc/ffmpeg-ffprobe-static/release-binaries.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-binaries.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/descriptinc/ffmpeg-ffprobe-static/release-binaries.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-binaries.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/descriptinc/ffmpeg-ffprobe-static/release-binaries.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-binaries.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/descriptinc/ffmpeg-ffprobe-static/release-binaries.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-binaries.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/descriptinc/ffmpeg-ffprobe-static/release-binaries.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-binaries.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/descriptinc/ffmpeg-ffprobe-static/release-binaries.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-binaries.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/descriptinc/ffmpeg-ffprobe-static/release-binaries.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-binaries.yml:94: update your workflow using https://app.stepsecurity.io/secureworkflow/descriptinc/ffmpeg-ffprobe-static/release-binaries.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-binaries.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/descriptinc/ffmpeg-ffprobe-static/release-binaries.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-binaries.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/descriptinc/ffmpeg-ffprobe-static/release-binaries.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-binaries.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/descriptinc/ffmpeg-ffprobe-static/release-binaries.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-binaries.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/descriptinc/ffmpeg-ffprobe-static/release-binaries.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-binaries.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/descriptinc/ffmpeg-ffprobe-static/release-binaries.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-binaries.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/descriptinc/ffmpeg-ffprobe-static/release-binaries.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-binaries.yml:154: update your workflow using https://app.stepsecurity.io/secureworkflow/descriptinc/ffmpeg-ffprobe-static/release-binaries.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-binaries.yml:163: update your workflow using https://app.stepsecurity.io/secureworkflow/descriptinc/ffmpeg-ffprobe-static/release-binaries.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-binaries.yml:172: update your workflow using https://app.stepsecurity.io/secureworkflow/descriptinc/ffmpeg-ffprobe-static/release-binaries.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-binaries.yml:181: update your workflow using https://app.stepsecurity.io/secureworkflow/descriptinc/ffmpeg-ffprobe-static/release-binaries.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-binaries.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/descriptinc/ffmpeg-ffprobe-static/release-binaries.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-binaries.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/descriptinc/ffmpeg-ffprobe-static/release-binaries.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-binaries.yml:207: update your workflow using https://app.stepsecurity.io/secureworkflow/descriptinc/ffmpeg-ffprobe-static/release-binaries.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-binaries.yml:216: update your workflow using https://app.stepsecurity.io/secureworkflow/descriptinc/ffmpeg-ffprobe-static/release-binaries.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-binaries.yml:224: update your workflow using https://app.stepsecurity.io/secureworkflow/descriptinc/ffmpeg-ffprobe-static/release-binaries.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-binaries.yml:233: update your workflow using https://app.stepsecurity.io/secureworkflow/descriptinc/ffmpeg-ffprobe-static/release-binaries.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-binaries.yml:242: update your workflow using https://app.stepsecurity.io/secureworkflow/descriptinc/ffmpeg-ffprobe-static/release-binaries.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-binaries.yml:251: update your workflow using https://app.stepsecurity.io/secureworkflow/descriptinc/ffmpeg-ffprobe-static/release-binaries.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-binaries.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/descriptinc/ffmpeg-ffprobe-static/release-binaries.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-binaries.yml:268: update your workflow using https://app.stepsecurity.io/secureworkflow/descriptinc/ffmpeg-ffprobe-static/release-binaries.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-binaries.yml:277: update your workflow using https://app.stepsecurity.io/secureworkflow/descriptinc/ffmpeg-ffprobe-static/release-binaries.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-binaries.yml:285: update your workflow using https://app.stepsecurity.io/secureworkflow/descriptinc/ffmpeg-ffprobe-static/release-binaries.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-binaries.yml:294: update your workflow using https://app.stepsecurity.io/secureworkflow/descriptinc/ffmpeg-ffprobe-static/release-binaries.yml/master?enable=pin
- Info: 0 out of 32 GitHub-owned GitHubAction dependencies pinned
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/release-binaries.yml:1
- Info: no jobLevel write permissions found
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
Project has not signed or included provenance with any releases.
Details
- Warn: release artifact b6.1.2-rc.1 not signed: https://api.github.com/repos/descriptinc/ffmpeg-ffprobe-static/releases/182538078
- Warn: release artifact b7.1.0-rc.1 not signed: https://api.github.com/repos/descriptinc/ffmpeg-ffprobe-static/releases/181619053
- Warn: release artifact b5.1.0-rc.1 not signed: https://api.github.com/repos/descriptinc/ffmpeg-ffprobe-static/releases/171417953
- Warn: release artifact b5.1-rc.1 not signed: https://api.github.com/repos/descriptinc/ffmpeg-ffprobe-static/releases/171417003
- Warn: release artifact b6.1.1-rc.5 not signed: https://api.github.com/repos/descriptinc/ffmpeg-ffprobe-static/releases/166961799
- Warn: release artifact b6.1.2-rc.1 does not have provenance: https://api.github.com/repos/descriptinc/ffmpeg-ffprobe-static/releases/182538078
- Warn: release artifact b7.1.0-rc.1 does not have provenance: https://api.github.com/repos/descriptinc/ffmpeg-ffprobe-static/releases/181619053
- Warn: release artifact b5.1.0-rc.1 does not have provenance: https://api.github.com/repos/descriptinc/ffmpeg-ffprobe-static/releases/171417953
- Warn: release artifact b5.1-rc.1 does not have provenance: https://api.github.com/repos/descriptinc/ffmpeg-ffprobe-static/releases/171417003
- Warn: release artifact b6.1.1-rc.5 does not have provenance: https://api.github.com/repos/descriptinc/ffmpeg-ffprobe-static/releases/166961799
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 13 are checked with a SAST tool
Score
2.9
/10
Last Scanned on 2024-11-25
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More