@cyanheads/nist-nvd-mcp-server 0.1.8 → 0.1.9

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (7) hide show
  1. package/AGENTS.md +5 -2
  2. package/CLAUDE.md +5 -2
  3. package/README.md +6 -6
  4. package/changelog/0.1.x/0.1.9.md +26 -0
  5. package/manifest.json +1 -1
  6. package/package.json +4 -3
  7. package/server.json +3 -3
package/AGENTS.md CHANGED
@@ -1,8 +1,8 @@
1
1
  # Developer Protocol
2
2
 
3
3
  **Server:** nist-nvd-mcp-server
4
- **Version:** 0.1.8
5
- **Framework:** [@cyanheads/mcp-ts-core](https://www.npmjs.com/package/@cyanheads/mcp-ts-core) `^0.9.16`
4
+ **Version:** 0.1.9
5
+ **Framework:** [@cyanheads/mcp-ts-core](https://www.npmjs.com/package/@cyanheads/mcp-ts-core) `^0.9.21`
6
6
  **Engines:** Bun ≥1.3.0, Node ≥24.0.0
7
7
  **MCP SDK:** `@modelcontextprotocol/sdk` ^1.29.0
8
8
  **Zod:** ^4.4.3
@@ -292,7 +292,9 @@ Available skills:
292
292
  | `api-testing` | createMockContext, test patterns |
293
293
  | `api-utils` | Formatting, parsing, security, pagination, scheduling, telemetry helpers |
294
294
  | `api-telemetry` | OTel catalog: spans, metrics, completion logs, env config, cardinality rules |
295
+ | `api-mirror` | MirrorService: persistent local SQLite mirror of a bulk upstream dataset — defineMirror, sqliteMirrorStore, FTS5 |
295
296
  | `api-workers` | Cloudflare Workers runtime |
297
+ | `orchestrations` | Chain task skills into a gated multi-phase pipeline (build-out, QA-fix, update-ship) when sub-agents are available |
296
298
 
297
299
  When you complete a skill's checklist, check the boxes and add a completion timestamp at the end (e.g., `Completed: 2026-03-11`).
298
300
 
@@ -316,6 +318,7 @@ When you complete a skill's checklist, check the boxes and add a completion time
316
318
  | `bun run start:http` | Production mode (HTTP) |
317
319
  | `bun run changelog:build` | Regenerate `CHANGELOG.md` from `changelog/*.md` |
318
320
  | `bun run changelog:check` | Verify `CHANGELOG.md` is in sync (used by devcheck) |
321
+ | `bun run release:github` | Create GitHub Release — constructs title from tag, conditionally attaches `.mcpb` bundle |
319
322
  | `bun run bundle` | Build and pack as `.mcpb` for one-click Claude Desktop install |
320
323
 
321
324
  ---
package/CLAUDE.md CHANGED
@@ -1,8 +1,8 @@
1
1
  # Developer Protocol
2
2
 
3
3
  **Server:** nist-nvd-mcp-server
4
- **Version:** 0.1.8
5
- **Framework:** [@cyanheads/mcp-ts-core](https://www.npmjs.com/package/@cyanheads/mcp-ts-core) `^0.9.16`
4
+ **Version:** 0.1.9
5
+ **Framework:** [@cyanheads/mcp-ts-core](https://www.npmjs.com/package/@cyanheads/mcp-ts-core) `^0.9.21`
6
6
  **Engines:** Bun ≥1.3.0, Node ≥24.0.0
7
7
  **MCP SDK:** `@modelcontextprotocol/sdk` ^1.29.0
8
8
  **Zod:** ^4.4.3
@@ -292,7 +292,9 @@ Available skills:
292
292
  | `api-testing` | createMockContext, test patterns |
293
293
  | `api-utils` | Formatting, parsing, security, pagination, scheduling, telemetry helpers |
294
294
  | `api-telemetry` | OTel catalog: spans, metrics, completion logs, env config, cardinality rules |
295
+ | `api-mirror` | MirrorService: persistent local SQLite mirror of a bulk upstream dataset — defineMirror, sqliteMirrorStore, FTS5 |
295
296
  | `api-workers` | Cloudflare Workers runtime |
297
+ | `orchestrations` | Chain task skills into a gated multi-phase pipeline (build-out, QA-fix, update-ship) when sub-agents are available |
296
298
 
297
299
  When you complete a skill's checklist, check the boxes and add a completion timestamp at the end (e.g., `Completed: 2026-03-11`).
298
300
 
@@ -316,6 +318,7 @@ When you complete a skill's checklist, check the boxes and add a completion time
316
318
  | `bun run start:http` | Production mode (HTTP) |
317
319
  | `bun run changelog:build` | Regenerate `CHANGELOG.md` from `changelog/*.md` |
318
320
  | `bun run changelog:check` | Verify `CHANGELOG.md` is in sync (used by devcheck) |
321
+ | `bun run release:github` | Create GitHub Release — constructs title from tag, conditionally attaches `.mcpb` bundle |
319
322
  | `bun run bundle` | Build and pack as `.mcpb` for one-click Claude Desktop install |
320
323
 
321
324
  ---
package/README.md CHANGED
@@ -7,7 +7,7 @@
7
7
 
8
8
  <div align="center">
9
9
 
10
- [![Version](https://img.shields.io/badge/Version-0.1.8-blue.svg?style=flat-square)](./CHANGELOG.md) [![License](https://img.shields.io/badge/License-Apache%202.0-orange.svg?style=flat-square)](./LICENSE) [![Docker](https://img.shields.io/badge/Docker-ghcr.io-2496ED?style=flat-square&logo=docker&logoColor=white)](https://github.com/users/cyanheads/packages/container/package/nist-nvd-mcp-server) [![MCP SDK](https://img.shields.io/badge/MCP%20SDK-^1.29.0-green.svg?style=flat-square)](https://modelcontextprotocol.io/) [![npm](https://img.shields.io/npm/v/@cyanheads/nist-nvd-mcp-server?style=flat-square&logo=npm&logoColor=white)](https://www.npmjs.com/package/@cyanheads/nist-nvd-mcp-server) [![TypeScript](https://img.shields.io/badge/TypeScript-^6.0.3-3178C6.svg?style=flat-square)](https://www.typescriptlang.org/) [![Bun](https://img.shields.io/badge/Bun-v1.3.2-blueviolet.svg?style=flat-square)](https://bun.sh/)
10
+ [![Version](https://img.shields.io/badge/Version-0.1.9-blue.svg?style=flat-square)](./CHANGELOG.md) [![License](https://img.shields.io/badge/License-Apache%202.0-orange.svg?style=flat-square)](./LICENSE) [![Docker](https://img.shields.io/badge/Docker-ghcr.io-2496ED?style=flat-square&logo=docker&logoColor=white)](https://github.com/users/cyanheads/packages/container/package/nist-nvd-mcp-server) [![MCP SDK](https://img.shields.io/badge/MCP%20SDK-^1.29.0-green.svg?style=flat-square)](https://modelcontextprotocol.io/) [![npm](https://img.shields.io/npm/v/@cyanheads/nist-nvd-mcp-server?style=flat-square&logo=npm&logoColor=white)](https://www.npmjs.com/package/@cyanheads/nist-nvd-mcp-server) [![TypeScript](https://img.shields.io/badge/TypeScript-^6.0.3-3178C6.svg?style=flat-square)](https://www.typescriptlang.org/) [![Bun](https://img.shields.io/badge/Bun-v1.3.2-blueviolet.svg?style=flat-square)](https://bun.sh/)
11
11
 
12
12
  </div>
13
13
 
@@ -137,10 +137,10 @@ Add the following to your MCP client configuration file.
137
137
  ```json
138
138
  {
139
139
  "mcpServers": {
140
- "nist-nvd": {
140
+ "nist-nvd-mcp-server": {
141
141
  "type": "stdio",
142
142
  "command": "bunx",
143
- "args": ["nist-nvd-mcp-server@latest"],
143
+ "args": ["@cyanheads/nist-nvd-mcp-server@latest"],
144
144
  "env": {
145
145
  "MCP_TRANSPORT_TYPE": "stdio",
146
146
  "MCP_LOG_LEVEL": "info",
@@ -156,10 +156,10 @@ Or with npx (no Bun required):
156
156
  ```json
157
157
  {
158
158
  "mcpServers": {
159
- "nist-nvd": {
159
+ "nist-nvd-mcp-server": {
160
160
  "type": "stdio",
161
161
  "command": "npx",
162
- "args": ["-y", "nist-nvd-mcp-server@latest"],
162
+ "args": ["-y", "@cyanheads/nist-nvd-mcp-server@latest"],
163
163
  "env": {
164
164
  "MCP_TRANSPORT_TYPE": "stdio",
165
165
  "MCP_LOG_LEVEL": "info",
@@ -175,7 +175,7 @@ Or with Docker:
175
175
  ```json
176
176
  {
177
177
  "mcpServers": {
178
- "nist-nvd": {
178
+ "nist-nvd-mcp-server": {
179
179
  "type": "stdio",
180
180
  "command": "docker",
181
181
  "args": [
package/changelog/0.1.x/0.1.9.md ADDED
@@ -0,0 +1,26 @@
1
+ ---
2
+ summary: "mcp-ts-core 0.9.21 — per-request log context fix, secret-stripped error messages, fail-fast retries"
3
+ breaking: false
4
+ security: false
5
+ agent-notes: |
6
+ Framework dep @cyanheads/mcp-ts-core ^0.9.16 → ^0.9.21.
7
+ Notable changes picked up:
8
+ - HTTP transport per-request log context fix: per-request logs and traces now carry fresh
9
+ request + trace/span IDs instead of the frozen boot context.
10
+ - fetchWithTimeout strips query-string secrets (e.g. ?api_key=) from error messages and logs.
11
+ - withRetry fail-fast on non-retryable errors; ctx.fail auto-populates the retryable flag.
12
+ No source changes required for this server.
13
+ ---
14
+
15
+ # 0.1.9 — 2026-06-02
16
+
17
+ ## Changed
18
+
19
+ - **`@cyanheads/mcp-ts-core` ^0.9.16 → ^0.9.21** — HTTP transport per-request log context fix (per-request logs and traces carry fresh request + trace/span IDs instead of the frozen boot context); `fetchWithTimeout` strips query-string secrets (e.g. `?api_key=`) from error messages and logs; `withRetry` fail-fast on non-retryable errors; `ctx.fail` auto-populates the `retryable` flag.
20
+ - **`release:github` script** — new `scripts/release-github.ts` and `package.json` `release:github` entry; new `scripts/check-skill-versions.ts` and `scripts/devcheck.ts` updates align with framework tooling.
21
+ - **README client config** — server key renamed from `nist-nvd` to `nist-nvd-mcp-server`; `args` updated to use the scoped package name `@cyanheads/nist-nvd-mcp-server@latest`.
22
+
23
+ ## Dependencies
24
+
25
+ - `@cyanheads/mcp-ts-core` ^0.9.16 → ^0.9.21
26
+ - `vitest` ^4.1.7 → ^4.1.8
package/manifest.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "manifest_version": "0.3",
3
3
  "name": "nist-nvd-mcp-server",
4
- "version": "0.1.7",
4
+ "version": "0.1.9",
5
5
  "description": "Search and audit CVEs by keyword, severity, CWE, CISA KEV status, and CPE via the NIST National Vulnerability Database. STDIO or Streamable HTTP.",
6
6
  "author": {
7
7
  "name": "cyanheads"
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@cyanheads/nist-nvd-mcp-server",
3
3
  "mcpName": "io.github.cyanheads/nist-nvd-mcp-server",
4
- "version": "0.1.8",
4
+ "version": "0.1.9",
5
5
  "description": "Search and audit CVEs by keyword, severity, CWE, CISA KEV status, and CPE via the NIST National Vulnerability Database. STDIO or Streamable HTTP.",
6
6
  "type": "module",
7
7
  "main": "dist/index.js",
@@ -35,6 +35,7 @@
35
35
  "bundle": "bun run build && npx -y @anthropic-ai/mcpb pack . dist/nist-nvd-mcp-server.mcpb",
36
36
  "changelog:build": "bun run scripts/build-changelog.ts",
37
37
  "changelog:check": "bun run scripts/build-changelog.ts --check",
38
+ "release:github": "bun run scripts/release-github.ts",
38
39
  "test": "bunx vitest run",
39
40
  "publish-mcp": "mcp-publisher login github -token \"$(security find-generic-password -a \"$USER\" -s mcp-publisher-github-pat -w)\" && mcp-publisher publish",
40
41
  "start": "bun dist/index.js",
@@ -88,7 +89,7 @@
88
89
  "access": "public"
89
90
  },
90
91
  "dependencies": {
91
- "@cyanheads/mcp-ts-core": "^0.9.16",
92
+ "@cyanheads/mcp-ts-core": "^0.9.21",
92
93
  "pino-pretty": "^13.1.3",
93
94
  "zod": "^4.4.3"
94
95
  },
@@ -99,6 +100,6 @@
99
100
  "ignore": "^7.0.5",
100
101
  "tsc-alias": "^1.8.17",
101
102
  "typescript": "^6.0.3",
102
- "vitest": "^4.1.7"
103
+ "vitest": "^4.1.8"
103
104
  }
104
105
  }
package/server.json CHANGED
@@ -6,14 +6,14 @@
6
6
  "url": "https://github.com/cyanheads/nist-nvd-mcp-server",
7
7
  "source": "github"
8
8
  },
9
- "version": "0.1.8",
9
+ "version": "0.1.9",
10
10
  "packages": [
11
11
  {
12
12
  "registryType": "npm",
13
13
  "registryBaseUrl": "https://registry.npmjs.org",
14
14
  "identifier": "@cyanheads/nist-nvd-mcp-server",
15
15
  "runtimeHint": "bun",
16
- "version": "0.1.8",
16
+ "version": "0.1.9",
17
17
  "packageArguments": [
18
18
  {
19
19
  "type": "positional",
@@ -55,7 +55,7 @@
55
55
  "registryBaseUrl": "https://registry.npmjs.org",
56
56
  "identifier": "@cyanheads/nist-nvd-mcp-server",
57
57
  "runtimeHint": "bun",
58
- "version": "0.1.8",
58
+ "version": "0.1.9",
59
59
  "packageArguments": [
60
60
  {
61
61
  "type": "positional",