@remotion/lambda
Render Remotion videos on AWS Lambda
Supply chain provenance
Status for the latest visible version.
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| typosquat | typosquat.levenshtein:ramda | AI (typosquat): @remotion/lambda is a legitimate AWS Lambda integration package, not a typosquat of ramda. | ai | |
| phantom-deps | phantom-dep:zod | AI (phantom-deps): zod is a declared runtime dependency; phantom-dep heuristic is a false positive here. | ai | |
| phantom-deps | phantom-dep:@remotion/streaming | AI (phantom-deps): Same-org package, likely used indirectly via other @remotion/* deps; stable false positive. | ai | |
| phantom-deps | phantom-dep:@smithy/abort-controller | AI (phantom-deps): Framework-scoped AWS SDK package loaded by convention; stable false positive. | ai | |
| phantom-deps | phantom-dep:@aws-sdk/middleware-flexible-checksums | AI (phantom-deps): AWS SDK middleware loaded by convention; stable false positive for this package. | ai |
Versions (showing 51 of 127)
| Version | Deps | Published |
|---|---|---|
| 4.0.499 | 18 / 13 | |
| 4.0.498 | 18 / 13 | |
| 4.0.497 | 18 / 13 | |
| 4.0.496 | 18 / 13 | |
| 4.0.495 | 18 / 13 | |
| 4.0.494 | 18 / 13 | |
| 4.0.493 | 18 / 13 | |
| 4.0.492 | 18 / 13 | |
| 4.0.491 | 18 / 13 | |
| 4.0.490 | 18 / 13 | |
| 4.0.489 | 18 / 13 | |
| 4.0.488 | 18 / 13 | |
| 4.0.487 | 18 / 13 | |
| 4.0.486 | 18 / 13 | |
| 4.0.485 | 18 / 13 | |
| 4.0.484 | 18 / 13 | |
| 4.0.483 | 18 / 13 | |
| 4.0.482 | 18 / 13 | |
| 4.0.481 | 18 / 13 | |
| 4.0.479 | 18 / 13 | |
| 4.0.478 | 18 / 13 | |
| 4.0.477 | 18 / 13 | |
| 4.0.476 | 18 / 13 | |
| 4.0.475 | 18 / 13 | |
| 4.0.474 | 18 / 13 | |
| 4.0.473 | 18 / 13 | |
| 4.0.472 | 18 / 13 | |
| 4.0.471 | 18 / 13 | |
| 4.0.470 | 18 / 13 | |
| 4.0.469 | 18 / 13 | |
| 4.0.468 | 18 / 13 | |
| 4.0.467 | 18 / 13 | |
| 4.0.466 | 18 / 13 | |
| 4.0.465 | 18 / 13 | |
| 4.0.464 | 18 / 13 | |
| 4.0.463 | 18 / 13 | |
| 4.0.462 | 18 / 13 | |
| 4.0.461 | 18 / 13 | |
| 4.0.460 | 18 / 13 | |
| 4.0.459 | 18 / 13 | |
| 4.0.458 | 18 / 13 | |
| 4.0.457 | 18 / 13 | |
| 4.0.456 | 18 / 13 | |
| 4.0.455 | 18 / 13 | |
| 4.0.454 | 18 / 13 | |
| 4.0.453 | 18 / 13 | |
| 4.0.452 | 18 / 13 | |
| 4.0.451 | 18 / 13 | |
| 4.0.450 | 18 / 13 | |
| 4.0.449 | 18 / 13 | |
| 4.0.448 | 18 / 13 |
v4.0.499
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.0.498
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.0.497
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.0.496
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.0.495
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.0.494
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.0.493
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.0.492
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.0.491
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.0.490
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.0.489
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.0.488
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.0.487
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.0.486
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.0.485
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.
v4.0.484
1 findingPackage was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.