taskpod - npm Package Compare versions

Comparing version 0.4.4 to 0.4.5

dist/server.js

@@ -27,3 +27,3 @@ /**
 export const SERVER_NAME = "taskpod";
-export const SERVER_VERSION = "0.4.4";
+export const SERVER_VERSION = "0.4.5";
 export const allTools = [
@@ -30,0 +30,0 @@ ...teamTools,

dist/taskpod.js

@@ -33,2 +33,13 @@ #!/usr/bin/env node
 import { doctor } from "./cli/doctor.js";
+import { readFileSync } from "node:fs";
+/** The installed package version, read from package.json (single source of truth). */
+function readPackageVersion() {
+    try {
+        const pkg = JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8"));
+        return typeof pkg.version === "string" ? pkg.version : "unknown";
+    }
+    catch {
+        return "unknown";
+    }
+}
 const USAGE = `taskpod — developer CLI for Taskpod (${cmd.DEFAULT_API})
@@ -76,2 +87,3 @@
   help                        show this help
+  version                     print the installed taskpod version (also --version, -v)
 
@@ -108,2 +120,8 @@ Env: TASKPOD_API_URL, TASKPOD_TOKEN`;
     }
+    // `--version`/`-v`/`version` anywhere prints the version and never runs a
+    // command (so `taskpod init --version` can't mutate state).
+    if (command === "version" || argv.includes("--version") || argv.includes("-v")) {
+        print(`taskpod ${readPackageVersion()}`);
+        return;
+    }
     if (command === "mcp")
@@ -110,0 +128,0 @@ return runMcp(argv.slice(1));

package.json

 {
   "name": "taskpod",
-  "version": "0.4.4",
+  "version": "0.4.5",
   "description": "The Taskpod developer CLI and MCP server — sync project context to your machine and AI, and manage teams, projects, and tasks from any MCP client.",
@@ -5,0 +5,0 @@ "type": "module",

New alerts

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Found 2 instances

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Fixed alerts

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Found 2 instances

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Improved metrics

Total package byte prevSize

561965

0.14%

Lines of code

5347

0.34%

Worsened metrics

Number of low supply chain risk alerts

46

2.22%

No dependency changes