Skip to content

AI-by-design/primitiv

v2.1.1 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 26d MCP Developer Tools
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →
This release patches 1 known CVE

Topics

ai-agents design-system design-tokens figma llm-tools llm-tools-directory-tree
+3 more
mcp model-context-protocol storybook

Affected surfaces

auth rbac

Summary

AI summary

Fixed scanner component prop resolution to avoid using the first Props block.

Full changelog

2.1.1 (2026-06-30)

Bug Fixes

  • init: harden init against bad input and unsafe codex wiring (1ab6aa1)
  • scanner: resolve component props per-component, not from the first Props block (419ebce)
  • validate config and contract at trust boundaries with zod (c3e773b)

Security Fixes

  • init: hardened against bad input and unsafe codex wiring
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track AI-by-design/primitiv

Get notified when new releases ship.

Sign up free

About AI-by-design/primitiv

Design contract layer for your codebase. Scans Figma, code, Storybook, and token files, reconciles conflicts, and serves a single machine-readable source of truth over MCP so every agent gets the same authoritative design rules before it builds. Local-first — your code never leaves your machine.

All releases →

Related context

Beta — feedback welcome: [email protected]