← Home

@hyperframes/producer

npm Repository Homepage

HTML-to-video rendering engine using Chrome's BeginFrame API

100
Versions
—
License
No
Install Scripts
Verified
Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

vancejsmiguel.sierrajrusso1020

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
dependencies unvetted-dep:@hyperframes/lint AI (dependencies): Same-org monorepo sibling dependency. ai
phantom-deps phantom-dep:@hyperframes/parsers AI (phantom-deps): Same-org monorepo sibling, config-referenced. ai
phantom-deps phantom-dep:wawoff2 AI (phantom-deps): Referenced in config files for font processing; stable false positive for this package. ai
phantom-deps phantom-dep:@hyperframes/studio-server AI (phantom-deps): Same-org dep declared for transitive use; phantom-dep heuristic false positive for this package. ai
source-diff encoded-string-file:dist/distributed.js AI (source-diff): Base64 string is entities package htmlDecodeTree data, bundled by Bun — legitimate and stable for this package. ai
source-diff net-exec-file:dist/distributed.js AI (source-diff): Network + dynamic require in esbuild bundle is standard bundler shim pattern, not dropper behavior. ai
source-diff encoded-string-file:dist/index.js AI (source-diff): Long base64 string is the entities library HTML decode tree, a well-known benign pattern. ai
source-diff encoded-string-file:dist/public-server.js AI (source-diff): Same entities HTML decode tree base64 string; benign and stable across versions. ai
source-diff obfuscated-file:dist/distributed.js AI (source-diff): Standard esbuild bundle output; long lines are minified JS, not obfuscation. Matches documented distributed rendering entry point. ai
phantom-deps phantom-dep:@fontsource/montserrat AI (phantom-deps): Font asset dep; stable false positive. ai
phantom-deps phantom-dep:@fontsource/space-mono AI (phantom-deps): Font asset dep; stable false positive. ai
phantom-deps phantom-dep:@fontsource/eb-garamond AI (phantom-deps): Font asset dep; stable false positive. ai
phantom-deps phantom-dep:@fontsource/archivo-black AI (phantom-deps): Font asset dep; stable false positive. ai
phantom-deps phantom-dep:@fontsource/ibm-plex-mono AI (phantom-deps): Font asset dep; stable false positive. ai
phantom-deps phantom-dep:@fontsource/league-gothic AI (phantom-deps): Font asset dep; stable false positive. ai
phantom-deps phantom-dep:@fontsource/jetbrains-mono AI (phantom-deps): Font asset dep; stable false positive. ai
phantom-deps phantom-dep:postcss AI (phantom-deps): Font/CSS tooling dependency; referenced in config, not directly imported — stable false positive for this package. ai
phantom-deps phantom-dep:puppeteer AI (phantom-deps): Puppeteer used for headless Chrome rendering; loaded via config, not direct import — stable false positive. ai
phantom-deps phantom-dep:linkedom AI (phantom-deps): HTML rendering dep used indirectly; stable false positive for this package. ai
phantom-deps phantom-dep:@fontsource/inter AI (phantom-deps): Font packages are runtime assets loaded by config, not direct imports — stable false positive for all @fontsource deps. ai
phantom-deps phantom-dep:@fontsource/nunito AI (phantom-deps): Font asset dep; stable false positive. ai
phantom-deps phantom-dep:@fontsource/oswald AI (phantom-deps): Font asset dep; stable false positive. ai
phantom-deps phantom-dep:@fontsource/outfit AI (phantom-deps): Font asset dep; stable false positive. ai

Versions (showing 100 of 201)

Version Deps Published
0.7.23 23 / 13
0.7.20 22 / 13
0.7.15 22 / 13
0.7.14 20 / 13
0.7.13 20 / 13
0.7.12 20 / 13
0.7.10 20 / 13
0.7.9 20 / 13
0.7.8 20 / 13
0.7.7 20 / 13
0.7.5 20 / 13
0.7.4 20 / 13
0.7.3 20 / 13
0.7.2 20 / 13
0.7.1 20 / 13
0.7.0 20 / 13
0.6.121 20 / 13
0.6.120 20 / 13
0.6.119 20 / 13
0.6.118 20 / 13
0.6.116 20 / 13
0.6.115 20 / 13
0.6.114 20 / 13
0.6.113 20 / 13
0.6.112 20 / 13
0.6.111 20 / 13
0.6.110 20 / 13
0.6.108 20 / 13
0.6.107 20 / 13
0.6.106 20 / 13
0.6.105 20 / 13
0.6.104 20 / 13
0.6.103 20 / 13
0.6.102 20 / 13
0.6.100 20 / 13
0.6.99 20 / 13
0.6.98 20 / 13
0.6.97 20 / 13
0.6.96 20 / 13
0.6.94 20 / 13
0.6.92 20 / 13
0.6.91 20 / 13
0.6.90 20 / 13
0.6.89 20 / 13
0.6.88 20 / 13
0.6.87 20 / 13
0.6.86 20 / 13
0.6.85 20 / 13
0.6.84 20 / 13
0.6.83 20 / 13
0.6.82 20 / 13
0.6.81 20 / 13
0.6.79 19 / 13
0.6.77 19 / 13
0.6.76 19 / 13
0.6.75 19 / 13
0.6.74 19 / 13
0.6.73 19 / 13
0.6.72 19 / 13
0.6.70 19 / 13
0.6.69 19 / 13
0.6.65 19 / 13
0.6.64 19 / 13
0.6.63 19 / 13
0.6.62 19 / 13
0.6.61 19 / 13
0.6.60 19 / 13
0.6.59 19 / 13
0.6.58 19 / 13
0.6.56 19 / 13
0.6.54 19 / 13
0.6.53 19 / 13
0.6.52 19 / 13
0.6.51 19 / 13
0.6.50 19 / 13
0.6.49 19 / 13
0.6.48 19 / 13
0.6.47 19 / 13
0.6.46 19 / 13
0.6.45 19 / 13
0.6.44 19 / 13
0.6.42 19 / 13
0.6.41 19 / 13
0.6.40 19 / 13
0.6.39 19 / 13
0.6.38 19 / 13
0.6.37 19 / 13
0.6.36 19 / 13
0.6.35 19 / 13
0.6.34 19 / 13
0.6.33 19 / 13
0.6.32 19 / 13
0.6.31 19 / 13
0.6.30 19 / 13
0.6.29 19 / 13
0.6.28 19 / 13
0.6.27 19 / 13
0.6.26 19 / 13
0.6.25 19 / 13
0.6.24 19 / 13
Showing 100 of 201 Next page →

v0.7.23

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.20

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v0.7.15

1 finding
INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.