Hookwarden

v@hookwarden/[email protected] Feature

This release adds 1 notable feature for engineering teams evaluating rollout.

Published 1mo Secrets & Credentials

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

cli developer-tools go hmac php python

+5 more

static-analysis security signature-verification typescript webhook-security

Summary

AI summary

Updates Patch Changes, Minor Changes, and js/ts/python/php/go across a mixed release.

Type	Severity	Summary	CVE
Feature	Medium	Adds Go and PHP support to scan_handler. Adds Go and PHP support to scan_handler. Source: llm_adapter@2026-06-04 Confidence: high	—
Dependency	Low	Updates @hookwarden/engine to 0.9.1 and @hookwarden/rules to 0.9.1. Updates @hookwarden/engine to 0.9.1 and @hookwarden/rules to 0.9.1. Source: llm_adapter@2026-06-04 Confidence: high	—

Full changelog

50e8113: scan_handler now supports Go and PHP, giving the MCP full language parity with the CLI (js/ts/python/php/go). Bundles the tree-sitter-go and tree-sitter-php grammars, lazy-loads each dialect's WASM runtime per request, and removes the stale "PHP not in preview — use the CLI" rejection. AI coding agents can now scan Go and PHP webhook handlers directly through the MCP.

Updated dependencies
- @hookwarden/[email protected]
- @hookwarden/[email protected]

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Hookwarden

Get notified when new releases ship.

About Hookwarden