Skip to content

DigiCatalyst-Systems/dep-diff-mcp

v0.1.5 Feature

This release adds 2 notable features for engineering teams evaluating rollout.

Published 1mo MCP Security & Auth
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

changelog cve dependabot dependency-management mcp model-context-protocol
+4 more
npm pypi security typescript

Affected surfaces

auth

Summary

AI summary

Added Cloudflare Worker entry and auto-deployment workflow.

Full changelog

Added

  • Cloudflare Worker entry (src/worker.ts) exposing the server as streamable-HTTP, so the same factory can be hosted on free Cloudflare Workers and surfaced as a Smithery "Deploy via URL" endpoint.
  • .github/workflows/deploy-worker.yml: auto-deploys the Worker on main pushes that touch worker code; uses CLOUDFLARE_API_TOKEN repo secret. Also manually dispatchable.
  • createSandboxServer() export in src/index.ts so Smithery's capability scanner can introspect without real credentials.
  • Tests: 10 cases for src/index.ts (factory, sandbox, default export, configSchema), 12 cases for src/worker.ts (token resolver + handler). 61 tests pass total.

Changed

  • Worker reads GITHUB_TOKEN per-request: ?githubToken=... query param or base64-encoded ?config={...}. No shared Worker secret — each user supplies their own token, individual rate limits.
View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track DigiCatalyst-Systems/dep-diff-mcp

Get notified when new releases ship.

Sign up free

About DigiCatalyst-Systems/dep-diff-mcp

Translates a lockfile diff (npm, PyPI) into a human-readable upgrade plan. Point it at a Dependabot PR and get back semver classification, breaking changes from GitHub release notes, CVEs fixed in range, migration links, and a per-package recommendation. Bulk tool ranks up to 50 changes by risk (security > caution > review > likely-safe > safe)

All releases →

Related context

Beta — feedback welcome: [email protected]