Newpipe

Considering all the issues with "supply chain" attacks (sneaking malware code into libraries & such that many, MANY open source apps rely upon - I've no idea if that's the case here), I tend to prefer waiting until the code's been vetted, or at least out there long enough to minimize chances of infiltration. I know it's still no guarantee, but it's at least mildly safer.