Appearance
CDN & Versioning
All xStreams SDKs are hosted on cdn.xstreams.io and follow semantic versioning.
Version formats
You can load SDK files using three URL patterns:
| Pattern | Example | Caching | Use when |
|---|---|---|---|
| Exact version | @1.1.0 | 1 year (immutable) | Production — never changes |
| Major version | @1 | 5 minutes | Want bug fixes but no breaking changes |
| Latest | @latest | 5 minutes | Development / testing |
Examples
html
<!-- Exact — never changes, safest for production -->
<script src="https://cdn.xstreams.io/sdk/web/player-shaka@2.1.0/xstreams-player-shaka.js"></script>
<!-- Major — auto-updates within v2.x (no breaking changes) -->
<script src="https://cdn.xstreams.io/sdk/web/player-shaka@2/xstreams-player-shaka.js"></script>
<!-- Latest — always the newest version -->
<script src="https://cdn.xstreams.io/sdk/web/player-shaka@latest/xstreams-player-shaka.js"></script>Version manifest
All available packages and versions are listed at:
https://cdn.xstreams.io/sdk/versions.jsonThis returns a JSON file with every package, its latest version, all released versions, and their status (stable or deprecated).
Web SDK files
Each web package includes:
| File | Description |
|---|---|
xstreams-player-*.js | Full source (readable) |
xstreams-player-*.min.js | Minified (production) |
xstreams-player-*.css | Edition-specific styles |
xstreams-player-*.d.ts | TypeScript definitions |
Always load the base CSS before the edition CSS:
html
<link rel="stylesheet" href="https://cdn.xstreams.io/sdk/web/base-css@latest/xstreams-player-base.css">
<link rel="stylesheet" href="https://cdn.xstreams.io/sdk/web/player-shaka@2.1.0/xstreams-player-shaka.css">Native SDK downloads
| Platform | URL |
|---|---|
| Android | https://cdn.xstreams.io/sdk/android/xstreams-player-1.0.0.aar |
| iOS | https://cdn.xstreams.io/sdk/ios/XStreamsPlayer-1.0.0.zip |
| Flutter | https://cdn.xstreams.io/sdk/flutter/xstreams_player-1.0.0.tar.gz |
Response headers
Every CDN response includes:
| Header | Value |
|---|---|
X-Cache | HIT (served from edge) or MISS (fetched from origin) |
X-SDK-Version | The resolved version (e.g., 2.1.0) |
X-SDK-Package | Package name (e.g., player-shaka) |
Cache-Control | Caching policy for this response |
SRI (Subresource Integrity)
For maximum security, use exact versions with SRI hashes:
html
<script
src="https://cdn.xstreams.io/sdk/web/player-shaka@2.1.0/xstreams-player-shaka.js"
integrity="sha384-..."
crossorigin="anonymous"
></script>Generate the hash: curl -s URL | openssl dgst -sha384 -binary | openssl base64 -A