v0.4.0: feat(gate): flag never-issued MCP session ids (GATE008)

Session ids are state handles, not credentials. GATE008 sends a
tools/list on a fabricated Mcp-Session-Id instead of a real one and
reports it when the endpoint answers anyway - the class behind
CVE-2026-52869 (MCP Python SDK, fixed in 1.27.2) and the mcp-grafana
CVE-2026-19516 chain.

Also documents the demand signals for the gate battery (CVE-2026-59822
as the first MCP flaw on CISA KEV, 9.6% of 3,074 public LiteLLM
instances accepting the default master key or no auth) in README and a
new blog post.

v0.1.2

Marketplace-ready release.

• Action renamed to mcplint-sec — Marketplace requires a unique name
  (mcplint is taken by an existing GitHub account). Usage is unchanged:
  reference the action as dtduc-git/mcplint@v0.1.2.
• Docs: M8ven Live Monitored badge, init command documented, corrected
  uvx install commands.

Install: uvx mcplint-sec scan · PyPI: https://pypi.org/project/mcplint-sec/

v0.1.0 — initial release

First public release.

13 rules mapped to OWASP MCP Top 10: hardcoded secrets, unpinned/typosquat packages, plain HTTP, unauthenticated remotes, filesystem overreach, shell servers, prompt-injection markers, hidden unicode, tool shadowing, lockfile drift, OSV CVEs.

Highlights

• static-only: never executes your MCP servers
• local-first: no telemetry; network only with --online
• .mcplint.lock.json pinning for rug-pull detection
• CycloneDX AIBOM export
• SARIF 2.1.0 + GitHub Action + pre-commit hook

Install: uvx mcplint-sec scan (command: mcplint)

PyPI: https://pypi.org/project/mcplint-sec/0.1.0/