Yt-dlp: Upcoming new requirements for YouTube downloads (github.com)

Article summary

The yt-dlp project, a YouTube video downloader, will soon require a JavaScript runtime like Deno to be installed in order to download videos from YouTube due to changes in YouTube's player JavaScript. This change is necessary because the current native JavaScript interpreter in yt-dlp is no longer sufficient to handle the new JavaScript challenges. The project recommends installing Deno, but other JavaScript runtimes like Node, Bun, and QuickJS will also be supported. Users will need to take action to install the required JavaScript runtime and possibly update their yt-dlp installation.

Main themes

• YouTube video downloading
• JavaScript runtime requirements
• yt-dlp updates
• Deno and security
• Video streaming protocols

What commenters say

• The use of Deno as a JavaScript runtime is a good choice due to its security features and single-exe distribution, making it easier to use and more secure than other options.
• Deno's sandboxing is not sufficient for security and should not be relied upon, especially when executing arbitrary code, as it can be vulnerable to exploits.
• The decision to use Deno is primarily driven by its ability to handle the new JavaScript challenges on YouTube, rather than its security features, and other runtimes like Node could have been used instead.
• The requirement for a JavaScript runtime is a necessary evil due to YouTube's increasing use of complex JavaScript code, making it difficult for native interpreters to keep up.
• Some commenters are concerned that the use of Deno and other JavaScript runtimes may not be secure enough, and that system-level sandboxing should be used as an additional layer of protection.
• Others argue that the security risks associated with using Deno are minimal, especially in the context of yt-dlp, and that the benefits of using a JavaScript runtime outweigh the potential risks.