
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
GEDCOM CLI and MCP server for AI-assisted family-history research. Parses and writes GEDCOM 5.5/7.0, generates a static family-page site, and exposes find_person/get_record/get_document_stats/date_calc/describe_changeset_ops/validate_changeset/check_plausibility/apply_changeset tools over MCP so an agent like Claude can research your tree and apply reviewed findings -- kept as reviewable JSON changesets and, with the optional --read-only flag, never written without a human in the loop.
FAQs
GEDCOM CLI and MCP server for AI-assisted family-history research. Parses and writes GEDCOM 5.5/7.0, generates a static family-page site, and exposes find_person/get_record/get_document_stats/date_calc/describe_changeset_ops/validate_changeset/check_plausibility/apply_changeset tools over MCP so an agent like Claude can research your tree and apply reviewed findings -- kept as reviewable JSON changesets and, with the optional --read-only flag, never written without a human in the loop.
We found that GedFire demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.