mirror of
https://github.com/heygen-com/hyperframes.git
synced 2026-09-01 19:42:03 +00:00
Rames' non-blocking note on #2975. The paths filter listed the renderer but not scripts/registry-target-paths.mjs, which it imports — so a future change to the path-traversal defence alone would never re-run the only job that exercises it. That is the same shape as the bug the module exists to prevent: the check is present, the thing that would catch a regression in it is not wired to run.