vinkius-labs/mcp-fusion

v3.6.5 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

Published 2mo MCP Developer Tools

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

mcp mcp-framework mcp-server model-context-protocol

Affected surfaces

auth breaking_upgrade

Summary

AI summary

RateLimiter and session TTL reaper fixes prevent resource leaks.

Full changelog

Fixed

RateLimiter cleanup interval auto-destroy — \destroy()\ now required in \RateLimitStore\ interface.
ateLimit()\ returns a \RateLimitMiddleware\ with exposed \destroy()\ for lifecycle management. Prevents phantom timer accumulation.
HTTP session Map TTL reaper — Added session activity tracking with periodic reaper (default: 5 min interval, 30 min TTL). New \sessionTtlMs\ and \sessionReapIntervalMs\ options. Prevents memory leaks from abandoned TCP connections.
DevServer ESM cache-bust context — Setup callback now receives \DevServerSetupContext\ with
egistry\ + \cacheBustUrl\ (backward-compatible). One-time ESM warning guides developers toward cache-busted imports.

Added

\RateLimitMiddleware\ type
\DevServerSetupContext\ type
\sessionTtlMs\ / \sessionReapIntervalMs\ options in \StartServerOptions\

Test Suite

25 new regression tests (5625 total across 278 files)

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track vinkius-labs/mcp-fusion

Get notified when new releases ship.

About vinkius-labs/mcp-fusion

A TypeScript framework for building production-ready MCP servers with automatic tool discovery, multi-transport support (stdio/SSE/HTTP), built-in validation, and zero-config setup.

All releases →

Related context

Related tools

Earlier breaking changes

v4.0.0 All packages now published under the `@mcpfusion` npm scope.
v4.0.0 GitHub repository renamed to vinkius-labs/mcpfusion; npm packages under @mcpfusion scope.
v4.0.0 All source code, documentation, CLI output, workflows, and npm packages now use the @mcpfusion scope.