r33drichards/mcp-js

v0.11.0 Breaking

This release includes 2 breaking changes for platform teams planning a safe upgrade.

Published 5d MCP Developer Tools

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

javascript mcp mcp-server

ReleasePort's take

Moderate signal

editorial:auto 5d

The project's license has shifted from ISC to GNU Affero General Public License v3, and the previous 64 MB ceiling on the --heap-memory-max flag has been eliminated.

Why it matters: License change requires compliance review for AGPLv3 obligations; removing the 64 MB heap limit enables larger memory allocations without prior constraint.

Summary

AI summary

License changed to GNU AGPLv3 and the 64 MB heap‑memory‑max limit removed.

Changes in this release

Type	Severity	Summary	CVE
Breaking	High	Switch license from ISC to GNU Affero General Public License v3 Switch license from ISC to GNU Affero General Public License v3 Source: llm_adapter@2026-05-30 Confidence: high	—
Bugfix	Medium	Remove 64MB upper bound on --heap-memory-max flag Remove 64MB upper bound on --heap-memory-max flag Source: llm_adapter@2026-05-30 Confidence: high	—

Full changelog

What's Changed

Switch license from ISC to GNU Affero General Public License v3 by @r33drichards in https://github.com/r33drichards/mcp-js/pull/151
fix: remove 64MB upper bound on --heap-memory-max by @r33drichards in https://github.com/r33drichards/mcp-js/pull/152

Full Changelog: https://github.com/r33drichards/mcp-js/compare/v0.10.22...v0.11.0

Breaking Changes

License switched from ISC to GNU Affero General Public License v3
Removed the 64 MB upper bound on --heap-memory-max

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track r33drichards/mcp-js

Get notified when new releases ship.

About r33drichards/mcp-js

A Javascript code execution sandbox that uses v8 to isolate code to run AI generated javascript locally without fear. Supports heap snapshotting for persistent sessions.

All releases →