heygen-com / hyperframes
Repository health
Security, maintenance, dependencies and license for heygen-com/hyperframes.
Security
16 dependencies checked (16 direct), npm, via deps.dev. Findings apply only to the packages and versions checked.
Security checks (RepoPilot estimate) · 6.2/10
OpenSSF has not scored this repository, so RepoPilot ran some of its checks from public GitHub data. Checks sorted from strongest to weakest.
- Recent activityLast commit 0d ago10/10
- License filePermissive license: Apache-2.010/10
- Tests run on pull requestsCI configured + tests present10/10
- Static analysis on commitsCodeQL action detected in workflows10/10
- Least-privilege CI tokensWorkflows declare explicit, scoped permissions10/10
- Pinned dependenciesAll actions pinned to SHAs10/10
- Code review before mergeOnly 1/20 recent PRs had requested reviewers2/10
- Automated dependency updatesNo Dependabot or Renovate config found0/10
- Security policyNo SECURITY.md found0/10
- Branch protectionDefault branch 'main' has no protection rule0/10
Maintenance
Outside contributions: 2 of 18 external pull requests merged (40% of those decided), median 0 days to merge.From the 93 most recently updated pull requests, bots excluded.
Pull requests
- Open
- 15
- 0 stale (60+ days, no update in 30)
- Merged
- 12
- of the 30 latest
- Median time to merge
- Same day
- From bots
- 1
- not listed below
Open
- #6112 feat(studio): motion blur panel with Off / Subtle / Strongvanceingalls · opened today
- #6108 feat: automatic tier, 240°/32 defaults, check finding, and Studio stops opting outvanceingalls · opened today
- #6107 feat(core): capture blur falls back to per-element filters where capture cannot runvanceingalls · opened today
- #6104 fix(cli): long hostile videos check in time: smaller, resumable copies and check --prepare-mediamiguel-heygen · opened today
- #6113 fix(lint): tell an agent where to move a video nested in a timed wrappermiguel-heygen · opened today
Recently merged
- #6106 fix(core): capture blur strobing, backdrop box, glow drop-out and callback motionvanceingalls · merged 23 Oct 2026
- #6111 test(cli): process tests stop owning old processes that carry a reused parent pid on Windowsmiguel-heygen · merged 23 Oct 2026
- #6063 feat(aws-lambda): push a prebuilt image to ECR without Dockermiguel-heygen · merged 23 Oct 2026
- #6114 feat(cli): check --prepare-media makes the video copies alone, and a stopped copy resumesmiguel-heygen · merged 23 Oct 2026
- #6097 fix(core): a scene paints no filter output from an HTML layer before its start or after its endmiguel-heygen · merged 23 Oct 2026
The 30 most recently updated pull requests.
Top contributors
- miguel-heygen70 commits · 71%
- vanceingalls13 commits · 13%
- xuanruli6 commits · 6%
- ukimsanov4 commits · 4%
- WaterrrForever4 commits · 4%
Of the 99 most recent commits.
Issues
- Open
- 399
- issues and pull requests, as GitHub counts them
- Median time to close
- 6 days
- from 3 closed of the 32 latest
- Awaiting first reply
- 18
- of 29 open among the 32 latest
- Oldest open
- 183 days
Rates come from the 32 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.
Packages pulled in by these were not checked.
License compatibility
Repo license: Apache-2.0 · 15 deps checked · 0 potential conflicts.