npm / react-lite-youtube-embed
react-lite-youtube-embed
What changed in react-lite-youtube-embed 2 to 3, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-19.
2 security5 new APIs and options2 performance11 fixes and other
See which of these apply to your code, ranked, in your agent:
npx @unstale/cli initreact-lite-youtube-embed 318 changes
Security 2
Going forward, releases include cryptographic provenance attestation that developers can verify with npm audit signatures.
Adds SLSA Build Level 3 provenance for supply chain security.
New APIs and options 4
Adds a prop to hide the play button after activation.
Playback rate and quality change events are implemented, allowing developers to respond to those changes.
Exports the imgResolution type for improved TypeScript DX.
Adds player events for future support.
Performance 1
Improves application performance.
Fixes and other changes 11
The iframe now loads immediately on mount when autoplay is enabled, so YouTube's autoplay=1 parameter is respected. Browsers still require muted for unmuted autoplay.
The TypeScript type now accepts both string and Record<string, string | number>, matching the documented API.
Removes the redundant img role when lazyLoad is enabled.
Fixes playlist icon visibility on mobile.
Resolves a Vitest peer dependency conflict.
Fixes a null reference error involving React hooks.
Fixes an initialization timing issue with the YouTube API.
Player event listening reliability was improved with retry logic.
Adds an onClick handler to the button to resolve the mobile double-click issue.
Updates the play button to match official YouTube styling.
Resolves the black margin issue on the iframe in Safari.
react-lite-youtube-embed 22 changes
New APIs and options 1
Adds JSON-LD structured data and noscript fallbacks for SEO.
Performance 1
Thumbnail images support lazy loading.