
Security News
Deno Goes the Way of the Dinosaur
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.
gh-release-mcp
Advanced tools
MCP server to list and download GitHub release assets — multi-mirror parallel ranged download, zero external binaries (no aria2/curl/gh/jq). By embedai.com.cn
An MCP server that lets an agent list and download GitHub release assets — with multi-mirror parallel ranged download and sha256 verification. Zero external binaries (pure Python standard library: no
aria2,curl,gh,jq). By embedai.com.cn.
Built for restricted networks: it probes which mirrors support HTTP Range (206), splits a file across mirrors and downloads segments in parallel, then verifies sha256 from GitHub's own asset digest.
| Tool | What it does |
|---|---|
list_release_assets | List a release's assets (name, size, url). |
download_release_asset | Download one asset (by name) or several (by glob pattern) with parallel ranged requests across mirrors; verifies sha256 when available. |
# run instantly (no install)
uvx gh-release-mcp
# or via pip
pip install gh-release-mcp
gh-release-mcp
It speaks MCP over stdio.
opencode (opencode.json):
{
"mcp": {
"gh-release": {
"type": "local",
"command": ["uvx", "gh-release-mcp"]
}
}
}
Claude Desktop / Cursor (mcpServers):
{
"mcpServers": {
"gh-release": { "command": "uvx", "args": ["gh-release-mcp"] }
}
}
download_release_asset arguments:
| arg | meaning |
|---|---|
owner, repo | e.g. NationalSecurityAgency, ghidra |
tag | release tag; omit or latest |
name | exact asset name (optional) |
pattern | glob, e.g. *PUBLIC*.zip (optional) |
dest | destination directory (default: cwd) |
mirrors | mirror prefixes (must support Range); default ghproxy.net + ghfast.top |
connections | segments per file (default 8) |
Env vars: GITHUB_TOKEN (optional, raises API limits / private repos).
BurntSushi/ripgrep latest."NationalSecurityAgency/ghidra Ghidra_12.1.4_build matching *PUBLIC*.zip into ./ghidra."gh-download-embedaiMIT
FAQs
MCP server to list and download GitHub release assets — multi-mirror parallel ranged download, zero external binaries (no aria2/curl/gh/jq). By embedai.com.cn
The pypi package gh-release-mcp receives a total of 286 weekly downloads. As such, gh-release-mcp popularity was classified as not popular.
We found that gh-release-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.

Security News
Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.

Security News
On Front Lines’ Early Adopters: CISO podcast, Andrew Becherer shares lessons from Datadog, weighs the long-term costs of AI-built tools, and explains how founders can actually gain a CISO’s trust.