@socketsecurity/mcp 0.0.17 → 0.0.19

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md ADDED
@@ -0,0 +1,36 @@
1
+ # Changelog
2
+
3
+ All notable changes to `@socketsecurity/mcp` will be documented in this file.
4
+
5
+ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
6
+ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
7
+
8
+ ## [Unreleased]
9
+
10
+ ## [0.0.19]
11
+
12
+ ### Changed
13
+
14
+ - Organization tools now scope their results to the authenticated caller.
15
+
16
+ ### Fixed
17
+
18
+ - Composer package URLs parse correctly: `packagist` is accepted as a composer
19
+ alias, bare-name packages resolve, and the vendor namespace is split from the
20
+ package name.
21
+ - The `depscore` tool no longer errors on packages with missing or non-numeric
22
+ score data.
23
+ - The HTTP server limits the size of POST request bodies.
24
+ - OAuth tokens whose introspection response carries a malformed expiry are now
25
+ rejected.
26
+
27
+ ## [0.0.18]
28
+
29
+ ### Fixed
30
+
31
+ - The `package_files` and `organizations` tools no longer fail with
32
+ `Unexpected token` JSON errors against the live Socket API.
33
+
34
+ ## [0.0.17]
35
+
36
+ Initial tracked release.