← Back to all sparks
S

Scrypted

INFRA · APIS
Velocity0.0

High-performance home video integration and automation platform

Scrypted's v0.147.0 pairs RTSP compliance fixes with two web-server security patches.

smart-homenvrself-hostedsecurity-fixesrtspopen-source
◆Current state
Scrypted is a self-hosted home video and NVR platform. After a ten-month gap, v0.145.0 and v0.147.0 landed eleven days apart in September. v0.147.0 fixes RTSP parser compliance, an engine.io routing vulnerability and an Express sendFile relative-path issue, and moves plugins to a rollup build.
◆Where it's heading
Visible activity is maintenance and security rather than features: type-safety refactors, dependency updates and server hardening. The last user-facing camera feature in these entries was Amcrest text overlay support in May 2025.
◆Prediction
Expect sporadic point releases with dependency and security fixes; the entries give no sign of a feature push.

◆Recent moves

  1. 1mo ago

    v0.147.0: RTSP parser compliance and web server security fixes

    The second release in eleven days after a ten-month gap. It fixes RTSP parsing, an engine.io routing vulnerability and relative paths in Express sendFile, which matter for anyone exposing the server.

    View source ↗
  2. 2mo ago

    v0.145.0: TypeScript type-safety refactoring

    v0.145.0 contains TypeScript type-safety refactoring only: definite assignment assertions, non-null assertions for port access, and undefined handling for service keys. No behavior change; no user-visible effect.

    View source ↗
  3. 1y ago

    v0.143.0: maintenance release

    v0.143.0 is listed as a commit sequence with no user-visible feature description. Standard maintenance release; the project was operating on its normal slow cadence at this point.

    View source ↗
  4. 1y ago

    v0.141.0: UniFi and LXC updater fixes

    v0.141.0 patches the UniFi integration and the LXC container updater, and removes Intel-specific code. Narrow scope — relevant only to users on UniFi or LXC deployments.

    View source ↗
  5. 1y ago

    v0.139.0: Amcrest video text overlay support

    v0.139.0 adds video text overlay support for Amcrest cameras — a user-visible feature that lets operators burn timestamp or metadata text into video streams from supported hardware. This is the most substantive user-facing change across the visible release history.

    View source ↗
  6. 1y ago

    v0.137.0: cluster manager address fix

    v0.137.0 fixes address availability in the cluster manager component. Relevant only to users running Scrypted in cluster mode; no user-visible effect otherwise.

    View source ↗