Skip to content

v0.2.0

Choose a tag to compare

@Protemir Protemir released this 20 Oct 10:04

After the first release I had the code reviewed three more times, fixed everything that held up (34 findings), then had the fixes reviewed again and fixed what that turned up too. Every fix has a regression test; there are now 300+ tests.

The registry also grew from 68 to 143 entries, each checked against the vendor's docs or repo on 2026-10-20 and then spot-checked by a second pass.

Installs

  • Config files keep their exact bytes. A file that isn't valid UTF-8 is refused instead of being corrupted, a BOM and CRLF stay, and rollback restores the original byte for byte.
  • If ~/.codex/config.toml is a symlink or hard link (dotfile managers), stackhint writes through it instead of replacing it.
  • .mcp.json gets the new server inserted into the text, so big numbers, key order and everything else stay untouched.
  • On Windows, project-scope installs warn that cmd /c npx won't start for macOS and Linux teammates. try --host codex prints commands for both PowerShell and Git Bash.

Recommendations

  • A replacement for a retired server you still use is always shown, even when another tool of the same kind ranks higher.
  • A hosted Neon or Supabase server no longer counts as "you already have a Postgres tool".
  • Servers behind mcp-remote are recognised, and docs.mcp.cloudflare.com no longer counts as the Cloudflare API server.
  • Task text needs real product context: "angular velocity", "a honeycomb grid", "sanity check" or "a zebra stripe" no longer suggest Angular, Honeycomb, Sanity or Stripe.

Detection

  • Secrets in a team's .vscode/mcp.json arguments can't end up in scan --format json output any more.
  • The scan is faster (about 0.6 s instead of 1.5–3.5 s on my projects): it goes breadth first, media files don't count against the file limit, and PATH lookups are about 15 times faster.
  • New detectors: browser extensions, browser games (three.js, Phaser, Pixi), plain pages with scripts, node --test, .NET Aspire, Gradle version catalogs, uv and PDM, UTF-16 requirements.txt, plus about 50 signals for the new entries. Go // indirect requirements and Dependabot bump commits no longer count.

New in the registry

  • MCP servers for Next.js, Angular, Svelte, Nuxt, Astro, Nx, Storybook, shadcn/ui, Shopify, Expo, Prisma, Hugging Face, Dart and Flutter, Xcode, Unity, Unreal, Develocity and Laravel Boost.
  • Hosting and services: Netlify, Heroku, Render, Railway, Fly.io, Pulumi, DigitalOcean, PlanetScale, Turso, Upstash, Algolia, Contentful, Sanity, Slack, Auth0, Clerk, Twilio docs, Resend, Asana, monday.com, ClickUp, Datadog, New Relic, Honeycomb, PagerDuty, Dynatrace, PostHog and Elastic Agent Builder.
  • All 13 official LSP plugins, plus the official security review, frontend design, PR review, commit, CLAUDE.md, Agent SDK, MCP server and plugin development plugins, Expo, Unity, Redis and ClickHouse skills, and Codex Security.

CLI and MCP server

  • The MCP server answers null, empty batches and bad ids with an error instead of exiting.
  • dismiss --project works from any subfolder and through symlinked folders (macOS /var → /private/var).
  • Parallel sessions no longer overwrite each other's state.
  • Every command takes --format json.

Full list: CHANGELOG.md.

npx -y github:Protemir/stackhint recommend