Repository navigation
v0.2.0
After the first release I had the code reviewed three more times, fixed everything that held up (34 findings), then had the fixes reviewed again and fixed what that turned up too. Every fix has a regression test; there are now 300+ tests.
The registry also grew from 68 to 143 entries, each checked against the vendor's docs or repo on 2026-10-20 and then spot-checked by a second pass.
Installs
- Config files keep their exact bytes. A file that isn't valid UTF-8 is refused instead of being corrupted, a BOM and CRLF stay, and
rollbackrestores the original byte for byte. - If
~/.codex/config.tomlis a symlink or hard link (dotfile managers), stackhint writes through it instead of replacing it. .mcp.jsongets the new server inserted into the text, so big numbers, key order and everything else stay untouched.- On Windows, project-scope installs warn that
cmd /c npxwon't start for macOS and Linux teammates.try --host codexprints commands for both PowerShell and Git Bash.
Recommendations
- A replacement for a retired server you still use is always shown, even when another tool of the same kind ranks higher.
- A hosted Neon or Supabase server no longer counts as "you already have a Postgres tool".
- Servers behind
mcp-remoteare recognised, anddocs.mcp.cloudflare.comno longer counts as the Cloudflare API server. - Task text needs real product context: "angular velocity", "a honeycomb grid", "sanity check" or "a zebra stripe" no longer suggest Angular, Honeycomb, Sanity or Stripe.
Detection
- Secrets in a team's
.vscode/mcp.jsonarguments can't end up inscan --format jsonoutput any more. - The scan is faster (about 0.6 s instead of 1.5–3.5 s on my projects): it goes breadth first, media files don't count against the file limit, and PATH lookups are about 15 times faster.
- New detectors: browser extensions, browser games (three.js, Phaser, Pixi), plain pages with scripts,
node --test, .NET Aspire, Gradle version catalogs, uv and PDM, UTF-16requirements.txt, plus about 50 signals for the new entries. Go// indirectrequirements and Dependabot bump commits no longer count.
New in the registry
- MCP servers for Next.js, Angular, Svelte, Nuxt, Astro, Nx, Storybook, shadcn/ui, Shopify, Expo, Prisma, Hugging Face, Dart and Flutter, Xcode, Unity, Unreal, Develocity and Laravel Boost.
- Hosting and services: Netlify, Heroku, Render, Railway, Fly.io, Pulumi, DigitalOcean, PlanetScale, Turso, Upstash, Algolia, Contentful, Sanity, Slack, Auth0, Clerk, Twilio docs, Resend, Asana, monday.com, ClickUp, Datadog, New Relic, Honeycomb, PagerDuty, Dynatrace, PostHog and Elastic Agent Builder.
- All 13 official LSP plugins, plus the official security review, frontend design, PR review, commit, CLAUDE.md, Agent SDK, MCP server and plugin development plugins, Expo, Unity, Redis and ClickHouse skills, and Codex Security.
CLI and MCP server
- The MCP server answers
null, empty batches and bad ids with an error instead of exiting. dismiss --projectworks from any subfolder and through symlinked folders (macOS/var→/private/var).- Parallel sessions no longer overwrite each other's state.
- Every command takes
--format json.
Full list: CHANGELOG.md.
npx -y github:Protemir/stackhint recommend