{"id":13402202,"url":"https://github.com/shaka-project/shaka-player","last_synced_at":"2026-05-04T13:06:07.383Z","repository":{"id":24831821,"uuid":"28246472","full_name":"shaka-project/shaka-player","owner":"shaka-project","description":"JavaScript player library / DASH \u0026 HLS client / MSE-EME player","archived":false,"fork":false,"pushed_at":"2026-02-06T12:06:01.000Z","size":270857,"stargazers_count":7919,"open_issues_count":57,"forks_count":1445,"subscribers_count":214,"default_branch":"main","last_synced_at":"2026-02-06T20:44:08.330Z","etag":null,"topics":["dash","drm","encrypted-media","hls","javascript","live","live-streaming","media-source-extension","mse","offline","offline-capable","offline-mode","playback","playback-controls","video","video-playback","video-player","video-player-library","video-streaming","vod"],"latest_commit_sha":null,"homepage":"http://shaka-project.github.io/shaka-player/","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/shaka-project.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":"support.html","governance":null,"roadmap":"roadmap.md","authors":"AUTHORS","dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2014-12-19T21:12:18.000Z","updated_at":"2026-02-06T18:09:16.000Z","dependencies_parsed_at":"2026-01-06T06:06:34.866Z","dependency_job_id":null,"html_url":"https://github.com/shaka-project/shaka-player","commit_stats":{"total_commits":6389,"total_committers":261,"mean_commits":"24.478927203065133","dds":0.6478322116137111,"last_synced_commit":"87641696c0a4e7e0134f9f9f92d4c68b72f6bc98"},"previous_names":["google/shaka-player"],"tags_count":892,"template":false,"template_full_name":null,"purl":"pkg:github/shaka-project/shaka-player","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/shaka-project%2Fshaka-player","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/shaka-project%2Fshaka-player/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/shaka-project%2Fshaka-player/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/shaka-project%2Fshaka-player/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/shaka-project","download_url":"https://codeload.github.com/shaka-project/shaka-player/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/shaka-project%2Fshaka-player/sbom","scorecard":{"id":437902,"data":{"date":"2025-08-11","repo":{"name":"github.com/shaka-project/shaka-player","commit":"7098f43f70119226bca2e5583833aaf27b498e33"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.4,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: jobLevel 'actions' permission set to 'write': .github/workflows/deflake.yaml:21","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/selenium-lab-tests.yaml:152","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/selenium-lab-tests.yaml:226","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/update-screenshots.yaml:35","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/update-screenshots.yaml:57","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/update-screenshots.yaml:229","Warn: no topLevel permission defined: .github/workflows/appspot.yaml:1","Warn: no topLevel permission defined: .github/workflows/build-and-test.yaml:1","Warn: no topLevel permission defined: .github/workflows/deflake.yaml:1","Warn: no topLevel permission defined: .github/workflows/demo-version-index.yaml:1","Warn: no topLevel permission defined: .github/workflows/github-pages-nightly-demo.yaml:1","Warn: no topLevel permission defined: .github/workflows/nightly-demo.yaml:1","Warn: no topLevel permission defined: .github/workflows/release-please.yaml:1","Warn: no topLevel permission defined: .github/workflows/report-incremental-coverage.yaml:1","Warn: no topLevel permission defined: .github/workflows/selenium-lab-tests.yaml:1","Warn: no topLevel permission defined: .github/workflows/sync-labels.yaml:1","Warn: no topLevel permission defined: .github/workflows/talk-to-shaka-bot.yaml:1","Warn: no topLevel permission defined: .github/workflows/update-issues.yaml:1","Warn: no topLevel permission defined: .github/workflows/update-screenshots.yaml:1","Warn: no topLevel permission defined: .github/workflows/validate-pr-title.yaml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact v4.15.9 not signed: https://api.github.com/repos/shaka-project/shaka-player/releases/235605284","Warn: release artifact v4.14.25 not signed: https://api.github.com/repos/shaka-project/shaka-player/releases/235602983","Warn: release artifact v4.15.8 not signed: https://api.github.com/repos/shaka-project/shaka-player/releases/233902637","Warn: release artifact v4.15.9 does not have provenance: https://api.github.com/repos/shaka-project/shaka-player/releases/235605284","Warn: release artifact v4.14.25 does not have provenance: https://api.github.com/repos/shaka-project/shaka-player/releases/235602983","Warn: release artifact v4.15.8 does not have provenance: https://api.github.com/repos/shaka-project/shaka-player/releases/233902637"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release-please.yaml:57"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 1 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Pinned-Dependencies","score":1,"reason":"dependency not pinned by hash detected -- score normalized to 1","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/appspot.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/appspot.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/appspot.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/appspot.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/appspot.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/appspot.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/appspot.yaml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/appspot.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/appspot.yaml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/appspot.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-and-test.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/build-and-test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-and-test.yaml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/build-and-test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-and-test.yaml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/build-and-test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-and-test.yaml:185: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/build-and-test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-and-test.yaml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/build-and-test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-and-test.yaml:253: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/build-and-test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-and-test.yaml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/build-and-test.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/demo-version-index.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/demo-version-index.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/demo-version-index.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/demo-version-index.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/demo-version-index.yaml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/demo-version-index.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/github-pages-nightly-demo.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/github-pages-nightly-demo.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/github-pages-nightly-demo.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/github-pages-nightly-demo.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/github-pages-nightly-demo.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/github-pages-nightly-demo.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/github-pages-nightly-demo.yaml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/github-pages-nightly-demo.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/github-pages-nightly-demo.yaml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/github-pages-nightly-demo.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly-demo.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/nightly-demo.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly-demo.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/nightly-demo.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly-demo.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/nightly-demo.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly-demo.yaml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/nightly-demo.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/nightly-demo.yaml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/nightly-demo.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-please.yaml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/release-please.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-please.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/release-please.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-please.yaml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/release-please.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-please.yaml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/release-please.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-please.yaml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/release-please.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-please.yaml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/release-please.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-please.yaml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/release-please.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-please.yaml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/release-please.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-please.yaml:151: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/release-please.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-please.yaml:185: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/release-please.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-please.yaml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/release-please.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/report-incremental-coverage.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/report-incremental-coverage.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/selenium-lab-tests.yaml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/selenium-lab-tests.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/selenium-lab-tests.yaml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/selenium-lab-tests.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/selenium-lab-tests.yaml:155: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/selenium-lab-tests.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/selenium-lab-tests.yaml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/selenium-lab-tests.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/selenium-lab-tests.yaml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/selenium-lab-tests.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/selenium-lab-tests.yaml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/selenium-lab-tests.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/selenium-lab-tests.yaml:195: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/selenium-lab-tests.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/selenium-lab-tests.yaml:202: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/selenium-lab-tests.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/selenium-lab-tests.yaml:212: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/selenium-lab-tests.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/selenium-lab-tests.yaml:242: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/selenium-lab-tests.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/selenium-lab-tests.yaml:249: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/selenium-lab-tests.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/selenium-lab-tests.yaml:256: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/selenium-lab-tests.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/selenium-lab-tests.yaml:262: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/selenium-lab-tests.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/selenium-lab-tests.yaml:268: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/selenium-lab-tests.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/selenium-lab-tests.yaml:277: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/selenium-lab-tests.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/selenium-lab-tests.yaml:292: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/selenium-lab-tests.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/selenium-lab-tests.yaml:375: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/selenium-lab-tests.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/selenium-lab-tests.yaml:391: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/selenium-lab-tests.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/selenium-lab-tests.yaml:407: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/selenium-lab-tests.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-labels.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/sync-labels.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-labels.yaml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/sync-labels.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/talk-to-shaka-bot.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/talk-to-shaka-bot.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-issues.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/update-issues.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-screenshots.yaml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/update-screenshots.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-screenshots.yaml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/update-screenshots.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-screenshots.yaml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/update-screenshots.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-screenshots.yaml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/update-screenshots.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-screenshots.yaml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/update-screenshots.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-screenshots.yaml:115: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/update-screenshots.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-screenshots.yaml:121: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/update-screenshots.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-screenshots.yaml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/update-screenshots.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-screenshots.yaml:145: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/update-screenshots.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-screenshots.yaml:218: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/update-screenshots.yaml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-screenshots.yaml:235: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/update-screenshots.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-screenshots.yaml:263: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/update-screenshots.yaml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate-pr-title.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/shaka-project/shaka-player/validate-pr-title.yaml/main?enable=pin","Warn: containerImage not pinned by hash: build/docker/Dockerfile:8: pin your Docker image by updating alpine:3.19 to alpine:3.19@sha256:3be987e6cde1d07e873c012bf6cfe941e6e85d16ca5fc5b8bedc675451d2de67","Warn: npmCommand not pinned by hash: .github/workflows/build-and-test.yaml:142","Warn: chocoCommand not pinned by hash: .github/workflows/build-and-test.yaml:158","Info:   0 out of  52 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of  21 third-party GitHubAction dependencies pinned","Info:   0 out of   1 chocoCommand dependencies pinned","Info:   0 out of   1 containerImage dependencies pinned","Info:   6 out of   7 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Vulnerabilities","score":0,"reason":"16 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm","Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574","Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm","Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695","Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw","Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9","Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm","Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55","Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-mxhp-79qh-mcx6","Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-19T05:05:37.993Z","repository_id":24831821,"created_at":"2025-08-19T05:05:37.993Z","updated_at":"2025-08-19T05:05:37.993Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29194423,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-02-07T12:38:28.597Z","status":"ssl_error","status_checked_at":"2026-02-07T12:38:23.888Z","response_time":63,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["dash","drm","encrypted-media","hls","javascript","live","live-streaming","media-source-extension","mse","offline","offline-capable","offline-mode","playback","playback-controls","video","video-playback","video-player","video-player-library","video-streaming","vod"],"created_at":"2024-07-30T19:01:12.886Z","updated_at":"2026-02-09T15:11:27.294Z","avatar_url":"https://github.com/shaka-project.png","language":"JavaScript","funding_links":[],"categories":["JavaScript","Applications","HarmonyOS","前端开发框架及项目","Players \u0026 Clients"],"sub_categories":["Video Streaming (e.g. YouTube, Netflix)","Windows Manager","多工具库支持或纯JS","Mobile \u0026 Web Players"],"readme":"# ![Shaka Player](docs/shaka-player-logo.png)\n\nShaka Player is an open-source JavaScript library for adaptive media.  It plays\nadaptive media formats (such as [DASH][], [HLS][] and [MSS][]) in a browser,\nwithout using plugins or Flash.  Instead, Shaka Player uses the open web\nstandards [MediaSource Extensions][] and [Encrypted Media Extensions][].\n\nShaka Player also supports [offline storage and playback][] of media using\n[IndexedDB][].  Content can be stored on any browser.  Storage of licenses\ndepends on browser support.\n\nOur main goal is to make it as easy as possible to stream adaptive bitrate\nvideo and audio using modern browser technologies. We try to keep the library\nlight, simple, and free from third-party dependencies. Everything you need to\nbuild and deploy is in the sources.\n\nFor details on what's coming next, see our [development roadmap](roadmap.md).\n\n[DASH]: http://dashif.org/\n[HLS]: https://developer.apple.com/streaming/\n[MSS]: https://learn.microsoft.com/en-us/iis/media/smooth-streaming/smooth-streaming-transport-protocol\n[MediaSource Extensions]: https://www.w3.org/TR/media-source/\n[Encrypted Media Extensions]: https://www.w3.org/TR/encrypted-media/\n[IndexedDB]: https://www.w3.org/TR/IndexedDB-2/\n[offline storage and playback]: https://shaka-player-demo.appspot.com/docs/api/tutorial-offline.html\n\n\n## Maintained branches\n\nSee [maintained-branches.md](https://github.com/shaka-project/shaka-player/blob/main/maintained-branches.md)\nfor the up-to-date list of maintained branches of Shaka Player.\n\n\n## Platform and browser support matrix\n\n|Browser       |Windows   |Mac      |Linux    |Android  |iOS \u003e= 9  |iOS \u003e= 17.1|iPadOS \u003e= 13|ChromeOS|Other|\n|:------------:|:--------:|:-------:|:-------:|:-------:|:--------:|:---------:|:----------:|:------:|:---:|\n|Chrome        |**Y**     |**Y**    |**Y**    |**Y**    |**Native**|**Native** |**Native**  |**Y**   | -   |\n|Firefox       |**Y**     |**Y**    |**Y**    |untested⁵|**Native**|**Native** |**Native**  | -      | -   |\n|Edge          |**Y**     | -       | -       | -       | -        | -         | -          | -      | -   |\n|Edge Chromium |**Y**     |**Y**    |**Y**    |untested⁵|**Native**|**Native** |**Native**  | -      | -   |\n|IE            | N        | -       | -       | -       | -        | -         | -          | -      | -   |\n|Safari        | -        |**Y**    | -       | -       |**Native**|**Y**      |**Y**       | -      | -   |\n|Opera         |**Y**     |**Y**    |**Y**    |untested⁵|**Native**| -         | -          | -      | -   |\n|Chromecast²   | -        | -       | -       | -       | -        | -         | -          | -      |**Y**|\n|Tizen TV³     | -        | -       | -       | -       | -        | -         | -          | -      |**Y**|\n|WebOS⁶        | -        | -       | -       | -       | -        | -         | -          | -      |**Y**|\n|Hisense⁷      | -        | -       | -       | -       | -        | -         | -          | -      |**Y**|\n|Vizio⁷        | -        | -       | -       | -       | -        | -         | -          | -      |**Y**|\n|Xbox One      | -        | -       | -       | -       | -        | -         | -          | -      |**Y**|\n|Playstation 4⁷| -        | -       | -       | -       | -        | -         | -          | -      |**Y**|\n|Playstation 5⁷| -        | -       | -       | -       | -        | -         | -          | -      |**Y**|\n\nNOTES:\n - ²: The latest stable Chromecast firmware is tested. Both sender and receiver\n   can be implemented with Shaka Player.\n - ³: Tizen 2017 model is actively tested and supported by the Shaka Player\n   team. Tizen 2016 model is community-supported and untested by us.\n - ⁵: These are expected to work, but are not actively tested by the Shaka\n   Player team.\n - ⁶: These are expected to work, but are community-supported and untested by\n   us.\n     - Official support for LG WebOS TV:\n       https://github.com/shaka-project/shaka-player/issues/1330\n - ⁷: These are expected to work, but are community-supported and untested by\n   us.\n\nNOTES for iOS and iPadOS:\n - We support iOS 9+ through Apple's native HLS player.  We provide the same\n   top-level API, but we just set the video's `src` element to the manifest/media.\n   So we are dependent on the browser supporting the manifests.\n - Since iPadOS 13 [MediaSource Extensions][] is supported\n - Since iPadOS 17 and iOS 17.1 [ManagedMediaSource Extensions][] is supported\n\n[ManagedMediaSource Extensions]: https://www.w3.org/TR/media-source-2/#dom-managedmediasource\n\n## Manifest format support matrix\n\n|Format|Video On-Demand|Live |Event|In-Progress Recording|\n|:----:|:-------------:|:---:|:---:|:-------------------:|\n|DASH  |**Y**          |**Y**| -   |**Y**                |\n|HLS   |**Y**          |**Y**|**Y**| -                   |\n|MSS   |**Y**          | -   | -   | -                   |\n\nYou can also create a [manifest parser plugin][] to support custom manifest\nformats.\n\n[manifest parser plugin]: https://shaka-player-demo.appspot.com/docs/api/tutorial-manifest-parser.html\n\n\n## DASH features\n\nDASH features supported:\n - VOD, Live, and In-Progress Recordings (dynamic VOD content)\n - MPD@timeShiftBufferDepth for seeking backward in Live streams\n - Multi-period content (static and dynamic)\n - Xlink elements (actuate=onLoad only, resolve-to-zero, fallback content)\n - All forms of segment index info: SegmentBase@indexRange, SegmentTimeline,\n   SegmentTemplate@duration, SegmentTemplate@index, SegmentList\n - Multi-codec/multi-container manifests (we will negotiate support with the\n   browser and choose the best ones)\n - Encrypted content (including custom ContentProtection schemas, PSSH in the\n   manifest)\n - Key rotation\n - Trick mode tracks\n - WebVTT and TTML\n - CEA-608/708 captions\n - Multi-codec variants (on platforms with changeType support)\n - MPD chaining\n - MPD Patch updates for SegmentTemplate with $Number$, SegmentTimeline with\n   $Number$ and SegmentTimeline with $Time$\n\nDASH features **not** supported:\n - Xlink with actuate=onRequest\n - Manifests without any segment info:\n   https://github.com/shaka-project/shaka-player/issues/1088\n - Multiple trick mode tracks for the same resolution at varying framerates or\n   bitrates\n - Timescales so large that timestamps cannot be represented as integers in\n   JavaScript (2^53): https://github.com/shaka-project/shaka-player/issues/1667\n - Modifying elements with an @schemeIdUri attribute via MPD Patch\n - Xlink dereferencing with MPD Patch\n\n\n## HLS features\n\nHLS features supported:\n - VOD, Live, and Event types\n - Low-latency streaming with partial segments, preload hints, delta updates and\n   blocking playlist reload\n - Discontinuity\n - ISO-BMFF / MP4 / CMAF support\n - MPEG-2 TS support\n - WebVTT and TTML\n - CEA-608/708 captions\n - Encrypted content with PlayReady, Widevine and WisePlay\n - Encrypted content with FairPlay (Safari on macOS and iOS only)\n - AES-128, AES-256 and AES-256-CTR support on browsers with Web Crypto API support\n - SAMPLE-AES and SAMPLE-AES-CTR (identity) support on browsers with ClearKey support\n - Key rotation\n - Raw AAC, MP3, AC-3 and EC-3 (without an MP4 container)\n - I-frame-only playlists (for trick play and thumbnails)\n - #EXT-X-IMAGE-STREAM-INF for thumbnails\n - Interstitials\n - Container change during the playback (eg: MP4 to TS, or AAC to TS)\n\nHLS features **not** supported:\n - X-SNAP attribute in interstitials\n\n\u003cdetails\u003e\n\u003csummary\u003e\n\u003ch3\u003eSupported HLS tags\u003c/h3\u003e\n\u003c/summary\u003e\n\nFor details on the HLS format and these tags' meanings, see https://datatracker.ietf.org/doc/html/draft-pantos-hls-rfc8216bis\n\n\u003ch4\u003e Multivariant Playlist tags\u003c/h4\u003e\n\n- `#EXT-X-STREAM-INF:\u003cattribute-list\u003e`\n  `\u003cURI\u003e`\n- `#EXT-X-MEDIA:\u003cattribute-list\u003e`\n- `#EXT-X-IMAGE-STREAM-INF:\u003cattribute-list\u003e`\n- `#EXT-X-I-FRAME-STREAM-INF:\u003cattribute-list\u003e`\n- `#EXT-X-SESSION-DATA:\u003cattribute-list\u003e`\n- `#EXT-X-SESSION-KEY:\u003cattribute-list\u003e` EME Key-System selection and preloading\n- `#EXT-X-START:TIME-OFFSET=\u003cn\u003e`\n- `#EXT-X-CONTENT-STEERING:\u003cattribute-list\u003e` Content Steering\n- `#EXT-X-DEFINE:\u003cattribute-list\u003e` Variable Substitution (`NAME,VALUE,QUERYPARAM` attributes)\n\n\u003ch4\u003eMedia Playlist tags\u003c/h4\u003e\n\n- `#EXTM3U`\n- `#EXTINF:\u003cduration\u003e,[\u003ctitle\u003e]`\n- `#EXT-X-PLAYLIST-TYPE:\u003ctype`\n- `#EXT-X-ENDLIST`\n- `#EXT-X-MEDIA-SEQUENCE=\u003cn\u003e`\n- `#EXT-X-TARGETDURATION=\u003cn\u003e`\n- `#EXT-X-DISCONTINUITY`\n- `#EXT-X-DISCONTINUITY-SEQUENCE=\u003cn\u003e`\n- `#EXT-X-BYTERANGE=\u003cn\u003e[@\u003co\u003e]`\n- `#EXT-X-MAP:\u003cattribute-list\u003e`\n- `#EXT-X-KEY:\u003cattribute-list\u003e` (`KEYFORMAT=\"identity\",METHOD=SAMPLE-AES` is only supports with MP4 segments)\n- `#EXT-X-PROGRAM-DATE-TIME:\u003cattribute-list\u003e`\n- `#EXT-X-START:TIME-OFFSET=\u003cn\u003e`\n- `#EXT-X-SERVER-CONTROL:\u003cattribute-list\u003e`\n- `#EXT-X-PART-INF:PART-TARGET=\u003cn\u003e`\n- `#EXT-X-PART:\u003cattribute-list\u003e`\n- `#EXT-X-SKIP:\u003cattribute-list\u003e` Delta Playlists\n- `#EXT-X-DATERANGE:\u003cattribute-list\u003e` Metadata\n- `#EXT-X-DEFINE:\u003cattribute-list\u003e` Variable Import and Substitution (`NAME,VALUE,IMPORT,QUERYPARAM` attributes)\n- `#EXT-X-GAP`\n- `#EXT-X-PRELOAD-HINT:\u003cattribute-list\u003e`\n- `#EXT-X-BITRATE`\n\n\u003c/details\u003e\n\n\n## MPEG-5 Part2 LCEVC Support\n\n**Only supported on browsers with Media Source Extensions SourceBuffer support**\n\n - MPEG-5 Part2 LCEVC decoding support (decoding provided by [lcevc_dec.js][], must be\n   separately included)\n\n - Integration documentation : [docs](docs/design/current/lcevc-integration.md)\n\n - More on [MPEG-5 Part2 LCEVC][]\n\n[lcevc_dec.js]: https://www.npmjs.com/package/lcevc_dec.js\n[MPEG-5 Part2 LCEVC]: https://www.lcevc.org\n\n\n## MSS features\n\nMSS features supported:\n - VOD\n - AAC and H.264\n - Encrypted content (PlayReady)\n - TTML/DFXP\n - Only supported with [codem-isoboxer][]\n\nMSS features **not** supported:\n - Live\n\n[codem-isoboxer]: https://github.com/Dash-Industry-Forum/codem-isoboxer\n\n## DRM support matrix\n\n|Browser       |Widevine  |PlayReady|FairPlay |WisePlay |ClearKey⁶ |\n|:------------:|:--------:|:-------:|:-------:|:-------:|:--------:|\n|Chrome¹       |**Y**     | -       | -       | -       |**Y**     |\n|Firefox²      |**Y**     | -       | -       | -       |**Y**     |\n|Edge³         | -        |**Y**    | -       | -       | -        |\n|Edge Chromium |**Y**     |**Y**    | -       | -       |**Y**     |\n|Safari        | -        | -       |**Y**    | -       | -        |\n|Opera         |**Y**     | -       | -       | -       |**Y**     |\n|Chromecast    |**Y**     |**Y**    | -       | -       |**Y**     |\n|Tizen TV      |**Y**     |**Y**    | -       | -       |**Y**     |\n|WebOS⁷        |untested⁷ |untested⁷| -       | -       |untested⁷ |\n|Hisense⁷      |untested⁷ |untested⁷| -       | -       |untested⁷ |\n|Vizio⁷        |untested⁷ |untested⁷| -       | -       |untested⁷ |\n|Xbox One      | -        |**Y**    | -       | -       | -        |\n|Playstation 4⁷| -        |untested⁷| -       | -       |untested⁷ |\n|Playstation 5⁷| -        |untested⁷| -       | -       |untested⁷ |\n|Huawei⁷       | -        | -       | -       |untested⁷|untested⁷ |\n\nOther DRM systems should work out of the box if they are interoperable and\ncompliant to the EME spec.\n\nNOTES:\n - ¹: Only official Chrome builds contain the Widevine CDM.  Chromium built from\n   source does not support DRM.\n - ²: DRM must be enabled by the user.  The first time a Firefox user visits a\n   site with encrypted media, the user will be prompted to enable DRM.\n - ³: PlayReady in Edge does not seem to work on a VM or over Remote Desktop.\n - ⁶: ClearKey is a useful tool for debugging, and does not provide actual\n   content security.\n - ⁷: These are expected to work, but are community-supported and untested by\n   us.\n\n|Manifest  |Widevine  |PlayReady|FairPlay |WisePlay |ClearKey  |\n|:--------:|:--------:|:-------:|:-------:|:-------:|:--------:|\n|DASH      |**Y**     |**Y**    |**Y**    |**Y**    |**Y**     |\n|HLS       |**Y**     |**Y**    |**Y** ¹  |**Y**    |**Y**     |\n|MSS       | -        |**Y**    | -       | -       | -        |\n\nNOTES:\n - ¹: By default, FairPlay is handled using Apple's native HLS player, when on\n   Safari. We do support FairPlay through MSE/EME, however. See the\n   `streaming.useNativeHlsForFairPlay` configuration value.\n\n\n## Media container and subtitle support\n\nShaka Player supports:\n  - ISO-BMFF / CMAF / MP4\n    - Depends on browser support for the container via MediaSource\n    - Can parse \"sidx\" box for DASH's SegmentBase@indexRange and\n      SegmentTemplate@index\n    - Can find and parse \"tfdt\" box to find segment start time in HLS\n    - For MSS, [codem-isoboxer][] v0.3.7+ is required\n  - WebM\n    - Depends on browser support for the container via MediaSource\n    - Can parse [cueing data][] elements for DASH's SegmentBase@indexRange and\n      SegmentTemplate@index\n    - Not supported in HLS\n  - MPEG-2 TS\n    - Can be played on any browser which supports MP4\n    - Can find and parse timestamps to find segment start time in HLS\n  - WebVTT\n    - Supported in both text form and embedded in MP4\n  - TTML\n    - Supported in both XML form and embedded in MP4\n  - CEA-608\n    - Supported embedded in MP4 and TS\n  - CEA-708\n    - Supported embedded in MP4 and TS\n  - Raw AAC\n    - Supported in raw AAC container and transmuxing to AAC in MP4 container\n      (depends on browser support via MediaSource).\n  - Raw MP3\n    - Supported in raw MP3 container and transmuxing to MP3 in MP4 container\n      (depends on browser support via MediaSource).\n  - Raw AC-3\n    - Supported in raw AC-3 container and transmuxing to AC-3 in MP4 container\n      (depends on browser support via MediaSource).\n  - Raw EC-3\n    - Supported in raw EC-3 container and transmuxing to EC-3 in MP4 container\n      (depends on browser support via MediaSource).\n  - SubRip (SRT)\n    - UTF-8 encoding only\n  - LyRiCs (LRC)\n    - UTF-8 encoding only\n  - SubStation Alpha (SSA, ASS)\n    - UTF-8 encoding only\n  - SubViewer (SBV)\n    - UTF-8 encoding only\n\nSubtitles are rendered by the browser by default. Applications can create a\n[text display plugin][] for customer rendering to go beyond browser-supported\nattributes.\n\n[cueing data]: https://www.webmproject.org/docs/container/#cueing-data\n[text display plugin]: https://nightly-dot-shaka-player-demo.appspot.com/docs/api/shaka.extern.TextDisplayer.html\n\u003c!-- TODO: replace with a link to a TextDisplayer tutorial --\u003e\n\n\n## Transmuxer support\n\nShaka Player supports:\n  - Raw AAC to AAC in MP4\n  - Raw MP3 to MP3 in MP4\n  - Raw AC-3 to AC-3 in MP4\n  - Raw EC-3 to EC-3 in MP4\n  - AAC in MPEG-2 TS to AAC in MP4\n  - AC-3 in MPEG-2 TS to AC-3 in MP4\n  - EC-3 in MPEG-2 TS to EC-3 in MP4\n  - MP3 in MPEG-2 TS to MP3 in MP4\n  - MP3 in MPEG-2 TS to raw MP3\n  - Opus in MPEG-2 TS to MP3 in MP4\n  - H.264 in MPEG-2 TS to H.264 in MP4\n  - H.265 in MPEG-2 TS to H.265 in MP4\n  - Muxed content in MPEG-2 TS with the previous codecs\n\n\n## Thumbnails support\n\nShaka Player supports:\n  - Internal DASH thumbnails. Using DASH-IF IOP Image Adaptation Set\n  - Internal HLS thumbnails. Using HLS Image Media Playlist\n  - Internal HLS thumbnails. Using I-frame-only playlists with mjpg codec\n  - External WebVTT with images/sprites (only for VoD)\n\n\n## Monetization with Ads\n\nShaka Player supports:\n- IMA SDK for Client-Side Ad Insertion\n- IMA DAI SDK for Server-Side Ad Insertion\n- AWS MediaTailor for Client-Side\n- AWS MediaTailor for Server-Side\n- AWS MediaTailor overlays\n- HLS interstitials\n- DASH Media Presentation Insertion (MPD alternate)\n- Custom Interstitials\n- Basic support of VAST and VMAP without IMA (playback without tracking)\n\n\n## Content Steering support\nShaka Player supports Content Steering (v1) in DASH and HLS.\n\nContent Steering features supported:\n- TTL, if missing, the default value is 300 seconds.\n- RELOAD-URI, if missing we use the url provided in the manifest as fallback.\n- PATHWAY-PRIORITY only HOST replacement\n\nContent Steering features **not** supported:\n- PATHWAY-CLONES other replacements than HOST.\n\n\n## VR support\nShaka Player supports VR when:\n- Content is automatically treated as VR if it fits the following criteria:\n  - HLS or DASH manifest\n  - fMP4 segments\n  - Init segment contains `prji` and `hfov` boxes\n- Or, if it is manually enabled via the UI config.\n\nVR modes supported:\n- Equirectangular projection with 360 degrees of horizontal field of view.\n- Half equirectangular projection with 180 degrees of horizontal field of view.\n- Cubemap projection with 360 degrees of horizontal field of view.\n\n\nNOTES:\n  - VR is only supported for clear streams or HLS-AES stream. DRM prevents\n    access to the video pixels for transformation.\n\n\n## Builds\n\nShaka currently provides the following versions:\n- Complete build with UI (`shaka-player.ui.js`)\n- Complete build without UI (`shaka-player.compiled.js`)\n- DASH build without UI, Cast and Offline (`shaka-player.dash.js`)\n- HLS build without UI, Cast and Offline (`shaka-player.hls.js`)\n\n\n## Documentation \u0026 Important Links ##\n\n * [Demo](https://shaka-player-demo.appspot.com)([sources](demo/))\n * [Nightly Demo](https://nightly-dot-shaka-player-demo.appspot.com)\n * [Demo index](https://index-dot-shaka-player-demo.appspot.com)\n * [API documentation](https://shaka-player-demo.appspot.com/docs/api/index.html)\n * [Tutorials](https://shaka-player-demo.appspot.com/docs/api/tutorial-welcome.html)\n * [Hosted builds on Google Hosted Libraries](https://developers.google.com/speed/libraries/#shaka-player)\n * [Hosted builds on jsDelivr](https://www.jsdelivr.com/package/npm/shaka-player)\n * [Development roadmap](roadmap.md)\n * Subscribe to releases by following\n     [instructions from this blog](https://www.jessesquires.com/blog/2020/07/30/github-tip-watching-releases/)\n\n\n## FAQ ##\n\nFor general help and before filing any bugs, please read the\n[FAQ](docs/tutorials/faq.md).\n\n\n## Contributing ##\n\nIf you have improvements or fixes, we would love to have your contributions.\nPlease read [CONTRIBUTING.md](CONTRIBUTING.md)\nfor more information on the process we would like contributors to follow.\n\n\n## Framework Integrations ##\n\nThe Shaka team doesn't have the bandwidth and experience to provide guidance and\nsupport for integrating Shaka Player with specific frameworks, but some of our\nusers have successfully done so and created tutorials to help other beginners.\n\nShaka + ReactJS Library\n- https://github.com/winoffrg/limeplay\n\nShaka + ReactJS integrations:\n- https://github.com/matvp91/shaka-player-react\n- https://github.com/amit08255/shaka-player-react-with-ui-config\n\nShaka + Next.js integration:\n- https://github.com/amit08255/shaka-player-react-with-ui-config/tree/master/nextjs-shaka-player\n\nShaka + Vue.js integrations:\n- https://github.com/davidjamesherzog/shaka-player-vuejs\n\nShaka + Nuxt.js integration:\n- https://github.com/davidjamesherzog/shaka-player-nuxtjs\n\nShaka + video.js integration:\n- https://github.com/davidjamesherzog/videojs-shaka\n\nShaka + Angular integration:\n- https://github.com/PatrickKalkman/shaka-player-angular\n\nIf you have published Shaka Integration code/tutorials, please feel free to submit PRs\nto add them to this list, we will gladly approve!\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fshaka-project%2Fshaka-player","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fshaka-project%2Fshaka-player","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fshaka-project%2Fshaka-player/lists"}