
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
release-gate-mcp
Advanced tools
Release intelligence for AI agents. Analyzes changes, detects breaking updates, generates release notes, and recommends the next semver bump.
Release intelligence for AI agents. Analyzes the changes in a repository, detects breaking updates, generates release notes, and recommends the next semantic version. Releases stop being guesses.
Built as an MCP server, so it works in any platform that speaks Model Context Protocol.
Version bumps and changelogs are hand rolled. An agent cannot tell whether a change is breaking or patch, so either nothing ships or the wrong version does. Release Gate reads the commits and the diff and answers with evidence.
release.analyze classify commits, detect breaking changes from messages and removed exports, recommend the next bumprelease.notes generate release notes grouped by type from the commits since the last tagrelease.bump compute the next semantic version from the current version and the recommended bumpBreaking changes are detected two ways: conventional commit markers such as refactor!: and BREAKING CHANGE, and removed exported symbols in the diff.
npm install -g release-gate-mcp
{
"mcpServers": {
"release": {
"command": "release-gate-mcp",
"args": []
}
}
}
MIT. Part of the Tawakkul Labs MCP family.
FAQs
Release intelligence for AI agents. Analyzes changes, detects breaking updates, generates release notes, and recommends the next semver bump.
The npm package release-gate-mcp receives a total of 593 weekly downloads. As such, release-gate-mcp popularity was classified as not popular.
We found that release-gate-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.