Releases, movers, new tools, and trending activity — sourced from GitHub signals.
## What's New ### Complete Parser Engine - Full .env parsing with type coercion (numbers, booleans, strings, empty) - Multiline double-quoted values (PEM keys, certificates) - Variable expansion (`${VAR}`, `$VAR`) - Strict mode for CI validation - `export KEY=value` support ###
Initial release — Compares your .env files across environments and branches to catch missing or mismatched variables before deployment
## What's New in v1.1.0 ### Security Fixes (Critical) - Fixed path traversal vulnerability in MCP resource handler - Fixed path traversal prefix bypass in `resolveVaultPath` - Added null byte rejection in path validation - Validated trash path against traversal attacks - Fixed `
## Security - **CodeQL SAST** — static analysis with build-mode manual (100% source coverage), zero open alerts gate - **Shell injection elimination** — replaced `system()` calls with `cbm_exec_no_shell()` (fork+execvp), no tainted data reaches a shell - **snprintf overflow fixe
Adds locked protect_signet_symlink rule blocking ln/symlink/mklink commands targeting .signet, signet-eval, or settings.json. 5 locked self-protection rules, 96 tests, zero warnings. Install: cargo install signet-eval
## Demo Video A 60-second walkthrough of ComplianceYieldTreasury: 1. Problem & Solution overview 2. ERC-3643 + ERC-8004 compliance architecture 3. Live Base Mainnet contract (0x99FCC335f879DbcF3AdA1623A769C7a6B3883d3D) 4. 9/9 fork tests green 5. 7 MCP tools for AI agents 6. Afri
## What's New in v2.3.0 ### Parenthesis-aware or() parser or(contains(parameters, 'a'), contains(parameters, 'b')) now works correctly. The parser tracks parenthesis depth and only splits at top-level separators. 3+ branches supported. ### contains_word() — word-boundary matchi
- Fixed keyframe offset bug: fractional values (0-1) now correctly map to percentages (0%-100%) - Added format rules to tool description to reduce validation errors on first attempts
## What's New ### Self-Protection (locked rules) Four locked rules ship in every default policy, preventing AI agents from disabling their own guardrails: - **protect_signet_dir** — Denies any tool touching .signet/ directory - **protect_signet_binary** — Denies tampering with t
## What's New ### Real Media Processing Engine All tools now use actual FFmpeg operations via moviepy, replacing the previous stub implementation. ### 26 MCP Tools - **Core**: trim, merge, resize, convert, speed, fade, export, thumbnail, preview, storyboard, extract_audio, edit
## What's Changed * No longer clear environment variables by @joedursun in https://github.com/massive-com/mcp_massive/pull/79 **Full Changelog**: https://github.com/massive-com/mcp_massive/compare/v0.8.5...v0.8.6
Reduced tool description from ~1.8k to ~311 tokens. Total tool context now ~636 tokens. ```bash npx nakkas@latest ```
## What's Changed See [CHANGELOG.md](./CHANGELOG.md) for details. ## Package - npm: https://www.npmjs.com/package/freee-mcp/v/0.14.0 - Install: `npm install [email protected]` ## Claude Plugin This repository can also be used as a Claude Code plugin: ```bash claude plugin insta
**Full Changelog**: https://github.com/arikusi/nakkas/commits/v0.1.0
## signet-eval v2.1.0 — Production Hardening ### Security - Session key file **encrypted with device-specific key** (no longer plaintext) - **Brute-force protection**: 5 failed passphrase attempts triggers 5-minute lockout - **Policy HMAC integrity**: `signet-eval sign` writes H
## What's Changed See [CHANGELOG.md](./CHANGELOG.md) for details. ## Package - npm: https://www.npmjs.com/package/freee-mcp/v/0.13.1 - Install: `npm install [email protected]` ## Claude Plugin This repository can also be used as a Claude Code plugin: ```bash claude plugin insta
## What is new in v1.1.0 - Combined setup: all 30 tools (messaging + polls + reactions + events) in one config block - Windows bridge included as a downloadable .exe, no Go or coding required - One-click setup.bat installer - Node.js 24 compatibility fixes - Non-technical step-b
* docs(README): add social preview banner and shields.io badges (cd9df39)
* feat(release): publish to GitHub Packages for repo visibility (fcdca32)
* refactor(contracts): replace deprecated passthrough() with z.looseObject() (a70f4ef) * docs(README): add warning about write-access API keys (d88e2e8) * Merge pull request #4 from edjufy/dependabot/npm_and_yarn/production-240ef83893 (bde0ad7) * chore(deps): bump zod from 3.25.7