This release adds 3 notable features for engineering teams evaluating rollout.
Published 4mo
MCP Developer Tools
✓ No known CVEs patched
✓ No known CVEs patched in this version
Affected surfaces
auth
Summary
AI summaryPre-commit hook automatically scans staged files for secrets and blocks commits containing potential API keys or tokens.
Full changelog
What's New
Security Features
- Pre-commit hook: Automatically scans staged files for secrets before each commit, blocking commits that contain potential API keys or tokens
- Secret detection: Detects AWS credentials, GitHub tokens, npm tokens, Stripe keys, private keys, and generic API keys/passwords
- CI integration: Security checks now run on all pull requests
New Commands
npm run security:check # Scan staged files for secrets
npm run security:check:all # Scan all tracked files for secrets
Configuration
- Added .secretsignore file to configure patterns that should be skipped (false positives)
Fixes
- Fixed package.json bin path per npm recommendation
Full Changelog
https://github.com/mercurialsolo/counsel-mcp/compare/v0.1.2...v0.1.3Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About mercurialsolo/counsel-mcp
Connect AI agents to the Counsel API for strategic reasoning, multi-perspective debate analysis, and interactive advisory sessions.
Related context
Beta — feedback welcome: [email protected]