RepoPilot

remotion-dev / remotion

Search remotion-dev/remotion

GitHub

Repository health

Security, maintenance, dependencies and license for remotion-dev/remotion.

Security

0
Critical
0 direct
0
High
0 direct
0
Moderate
0
Low

12 dependencies checked (12 direct), npm, via deps.dev. Findings apply only to the packages and versions checked.

Security checks (RepoPilot estimate) · 4.3/10

OpenSSF has not scored this repository, so RepoPilot ran some of its checks from public GitHub data. Checks sorted from strongest to weakest.

  • Recent activityLast commit 0d ago10/10
  • Tests run on pull requestsCI configured + tests present10/10
  • Least-privilege CI tokensWorkflows declare explicit, scoped permissions10/10
  • Pinned dependenciesOnly 26/62 actions pinned to SHAs2/10
  • Code review before mergeOnly 0/20 recent PRs had requested reviewers2/10
  • Automated dependency updatesNo Dependabot or Renovate config found0/10
  • Security policyNo SECURITY.md found0/10
  • Static analysis on commitsNo SAST workflow detected0/10
  • License fileLicense could not be verifiednot scored
  • Branch protectionInsufficient permissions to read branch protectionnot scored

Maintenance

22 Oct 2026
Last commit
active
100+
Commits in the last year
469
Contributors
all time · 3 in the last 100 commits
v4.0.538
Latest release
~3d cadence

Outside contributions: 9 of 24 external pull requests merged (100% of those decided), median 0.3 days to merge.From the 97 most recently updated pull requests, bots excluded.

Recent releases

  • v4.0.53822 Oct 2026 · 3 days after previous
  • v4.0.53719 Oct 2026 · 3 days after previous
  • v4.0.53616 Oct 2026 · 4 days after previous
  • v4.0.53512 Oct 2026 · 5 days after previous
  • v4.0.5347 Oct 2026 · 2 days after previous

Pull requests

Open
15
0 stale (60+ days, no update in 30)
Merged
15
of the 30 latest
Median time to merge
Same day
From bots
0
not listed below

The 30 most recently updated pull requests.

Top contributors

Of the 100 most recent commits.

Issues

Open
188
issues and pull requests, as GitHub counts them
Median time to close
23 days
from 7 closed of the 14 latest
Awaiting first reply
5
of 7 open among the 14 latest
Oldest open
4.3 years

Rates come from the 14 most recently updated issues; the open count and oldest issue cover the whole repository.

Dependencies

Checked packages and import counts

These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.

12
Packages checked
npm
12
Direct packages checked
listed in the manifest
Unknown
External imports
outside packages the code imports

Packages pulled in by these were not checked.

License

Unknown
License
Unknown / unlicensed
Family
Unknown
License conflicts in dependencies
Dependency licenses were not checked
Commercial use: No clear license detected. With no license, default copyright applies — treat as all-rights-reserved until you confirm terms with the maintainer.