v1.5.1

[kaifcodec]

user-scanner v1.5.1 — 2026-08-28

This release collects changes merged after v1.5.0 (PRs merged after #573). It continues the recent focus on expanding module coverage (many new username and email OSINT modules), hardening input handling, documenting and testing integrity, and adding server support for the Model Context Protocol (MCP).

Notable highlights

• New and expanded username modules: multiple new username modules were added across categories (CodePen, Clubhouse, DevHunt, character.ai, guns.lol, Beacons, Lnk.Bio, TryHackMe validator, BugCrowd, Faceit, LessWrong, Hex.pm, Spatial, Tenor, HackerNoon, TwitchTracker, Matrix, OpenAI Community, JuliaLang, Gnome, WakaTime, Letterboxd, ArtStation, Geocaching, peerpush and others). See the PR list for exact entries.
• New and expanded email modules: added additional email OSINT modules including Canva, Figma, Atlassian, Start.me, and a set of new email modules introduced as a dating category; ASL Bloom module added to the learning category.
• Security / input hardening: URL/query input is encoded in request query strings (batch fixes in PRs fix: encode user-controlled input in request query strings (batch 1/#574) #602 and fix: encode user-controlled input in request query strings (batch 2/#574) #604) to avoid injection issues.
• MCP server support: added Model Context Protocol server support (PR feat: add Model Context Protocol (MCP) server support #594) — enables external tooling integrations; note there were substantive review comments recorded on that PR.
• Reliability and output fixes: PDF report generation for batch scans isolated (PR fix(pdf): isolate batch scans into separate pdf reports #601), fixes for curl_cffi timeouts and apexlegends improvements (PR fix: clean curl_cffi timeout errors and optimize apexlegends #576), and other bug fixes.
• Tests and CI: added module duplicate / naming integrity tests and other test improvements (PR test(integrity): add module duplicate and naming integrity tests #600), plus continued test and CI maintenance.

Detailed merged PRs included in v1.5.1

(Each entry shows PR number, title, author, and recorded reviewers — see full list in the release notes page.)

• fix: ensure category headers print correctly with --all flag #575 — fix: ensure category headers print correctly with --all flag — by @kaifcodec (review: @json-hunter07 APPROVED)
• fix: clean curl_cffi timeout errors and optimize apexlegends #576 — fix: clean curl_cffi timeout errors and optimize apexlegends — by @kaifcodec (review: none recorded)
• feat(email_scan): add 14 new email OSINT modules and introduce dating category #578 — feat(email_scan): add 14 new email OSINT modules and introduce dating category — by @kaifcodec (review: @json-hunter07 APPROVED)
• fix(email_scan): handle Facebook rate-limiting response gracefully #579 — fix(email_scan): handle Facebook rate-limiting response gracefully — by @kaifcodec (review: @json-hunter07 APPROVED)
• feat(user_scan): add 3 new username scan modules #580 — feat(user_scan): add 3 new username scan modules — by @kaifcodec (review: @json-hunter07 APPROVED)
• feat(user_scan): add new username scan modules and reorganize categories #581 — feat(user_scan): add new username scan modules and reorganize categories — by @kaifcodec (review: @json-hunter07 APPROVED)
• feat: Next.js helper functions #583 — feat: Next.js helper functions — by @kristoisberg (reviews: @kaifcodec APPROVED)
• feat: Quora username module #584 — feat: Quora username module — by @kristoisberg (review: @kaifcodec APPROVED)
• feat: CodePen username module #585 — feat: CodePen username module — by @kristoisberg (review: @kaifcodec APPROVED)
• feat: BugCrowd username module #586 — feat: BugCrowd username module — by @kristoisberg (review: @kaifcodec APPROVED)
• feat(user_scan): add peerpush module #587 — feat(user_scan): add peerpush module — by @kaifcodec (review: none recorded)
• feat: Clubhouse username module #588 — feat: Clubhouse username module — by @kristoisberg (review: @kaifcodec APPROVED)
• feat: DevHunt username module #589 — feat: DevHunt username module — by @kristoisberg (review: @kaifcodec APPROVED)
• Add TryHackMe username validator to user_scan/dev #590 — Add TryHackMe username validator to user_scan/dev — by @rivalsxninjax1 (review: @kaifcodec APPROVED)
• feat: character.ai username module #591 — feat: character.ai username module — by @kristoisberg (review: @kaifcodec APPROVED)
• feat: Beacons username module #592 — feat: Beacons username module — by @kristoisberg (review: @kaifcodec APPROVED)
• feat: Lnk.Bio username module #593 — feat: Lnk.Bio username module — by @kristoisberg (reviews: @kaifcodec APPROVED)
• feat: add Model Context Protocol (MCP) server support #594 — feat: add Model Context Protocol (MCP) server support — by @kaifcodec (reviews: @brunolm CHANGES_REQUESTED)
• feat: Ko-fi username module #597 — feat: Ko-fi username module — by @kristoisberg (review: @kaifcodec APPROVED)
• feat: Direct.me username module #598 — feat: Direct.me username module — by @kristoisberg (review: @kaifcodec APPROVED)
• feat(user_scan): add Faceit, LessWrong, Hex.pm, Spatial, and Tenor modules #599 — feat(user_scan): add Faceit, LessWrong, Hex.pm, Spatial, and Tenor modules — by @kaifcodec (review: @json-hunter07 APPROVED)
• test(integrity): add module duplicate and naming integrity tests #600 — test(integrity): add module duplicate and naming integrity tests — by @kaifcodec (review: @json-hunter07 APPROVED)
• fix(pdf): isolate batch scans into separate pdf reports #601 — fix(pdf): isolate batch scans into separate pdf reports — by @kaifcodec (review: @json-hunter07 APPROVED)
• fix: encode user-controlled input in request query strings (batch 1/#574) #602 — fix: encode user-controlled input in request query strings (batch 1/[Bug] Unescaped user input in query string URLs (multiple modules) #574) — by @A-S-Manoj (review: @kaifcodec APPROVED)
• feat: guns.lol username module #603 — feat: guns.lol username module — by @kristoisberg (review: @kaifcodec APPROVED)
• fix: encode user-controlled input in request query strings (batch 2/#574) #604 — fix: encode user-controlled input in request query strings (batch 2/[Bug] Unescaped user input in query string URLs (multiple modules) #574) — by @A-S-Manoj (review: @kaifcodec APPROVED)
• feat(email_scan): add Canva, Figma, Atlassian, and Start.me modules #605 — feat(email_scan): add Canva, Figma, Atlassian, and Start.me modules — by @kaifcodec (review: @json-hunter07 APPROVED)
• feat(user_scan): add HackerNoon, TwitchTracker, Matrix, OpenAI Community, and JuliaLang modules #606 — feat(user_scan): add HackerNoon, TwitchTracker, Matrix, OpenAI Community, and JuliaLang modules — by @kaifcodec (review: none recorded)
• feat(user_scan): add Gnome, WakaTime, Letterboxd, ArtStation, and Geocaching modules #607 — feat(user_scan): add Gnome, WakaTime, Letterboxd, ArtStation, and Geocaching modules — by @kaifcodec (review: none recorded)
• fix(email): update Polarsteps API to v10.6.0 #608 — fix(email): update Polarsteps API to v10.6.0 — by @kaifcodec (review: @json-hunter07 APPROVED)
• feat(email_scan): add ASL Bloom module in learning category #609 — feat(email_scan): add ASL Bloom module in learning category — by @kaifcodec (review: none recorded)

Credits

Thanks to all contributors and reviewers for these changes: @kaifcodec, @kristoisberg, @A-S-Manoj, @json-hunter07, @brunolm, @rivalsxninjax1 and others.

---

---

This discussion was created from the release v1.5.1.