Beacon 1.2.0

Beacon 1.2.0

npm install -g @martin-k-m/beacon-cli
beacon analyze facebook/react

Fixed

• Remote analysis reported every repository as having zero dependencies. The GitHub collector hardcoded dependencyCount: 0 for each detected manifest, so a repository with 50 dependencies reported 0. Remote collection lists the repository tree without reading manifest contents, so the count is genuinely unknown there and now reports null. Local analysis (--local) parses manifests off disk and still reports real counts.

Added

• Plugins are now reachable. @beacon/plugins was built and tested but imported by nothing, so no plugin could ever run. Plugins are now a self-hosting feature: BEACON_PLUGINS loads modules at API boot, GET /api/plugins lists what is loaded, GET /api/repositories/:owner/:repo/plugins runs analyzers and recommenders, and plugin widgets render through the existing /widget/:type/:owner/:repo route (same cache, same error card; built-in types keep precedence). A plugin that fails to import, or throws, is logged and skipped — it never stops the API booting. See docs/plugins.md.

Security

• vitest 2 → 3 across all nine packages that declare it, clearing 10 critical advisories. Development-only — a test runner is never shipped.
• Next.js 14.2.35 → 15.5.20, clearing 28 advisories including 10 high.
• esbuild 0.24 → 0.25 (development).
• The published CLI was never affected by any of the above: it has zero runtime dependencies.

Changed

• BREAKING (type): DependencyManifest.dependencyCount is now number | null. null means "unknown", never "none". Consumers reading it from beacon analyze --json or @beacon/sdk must handle null — remote analyses now emit null where they previously emitted 0.
• React 18 → 19 and Recharts 2 → 3 in the dashboard, plus Next 15 async route params.

Verified from a clean npm ci: lint 26 · typecheck 26 · test 20 (141 tests) · build 15.

Full notes: CHANGELOG.md

Beacon 1.1.2

Beacon 1.1.2 — the CLI is now @martin-k-m/beacon-cli

The @beacon scope is not available on npm (and the unscoped beacon / beacon-cli names are taken), so the published CLI moves to the maintainer's existing scope.

npm install -g @martin-k-m/beacon-cli
beacon analyze facebook/react

Notes

• The command is unchanged — still beacon. Only the npm package name changed.
• The package was never published under the old name, so there is nothing to migrate.
• Internal workspace packages (@beacon/analytics, @beacon/shared, …) keep their names — they are not published.
• The release workflow (turbo filters + npm pack/npm publish) targets the new name.

No functional changes — the Phase 2 features shipped in v1.1.0.

Beacon 1.1.1

Beacon 1.1.1 — documentation sync

A docs-only release. No code changes — the Phase 2 features shipped in v1.1.0.

Changed

• README structure tree, docs/architecture.md (package table + data-flow diagram), docs/self-hosting.md, and CONTRIBUTING.md now describe the decomposed engine: shared, github, ai, analytics, ai-advisor, dependency-engine, plugins, and worker.
• Removed the last references to the retired @beacon/core.
• The marketing site (beacon.blinkdev.me) now advertises the AI Advisor, dependency intelligence, team health / bus factor, and continuous monitoring, with docs for the new CLI commands and API endpoints.

Install the CLI: npm install -g @beacon/cli. MIT licensed.

Beacon 1.1.0

Beacon 1.1.0 — continuous repository intelligence

Phase 2 turns Beacon from "analyze a repository" into "continuously understand, monitor, and improve a project."

New

• AI Advisor (@beacon/ai-advisor) — why health changed + prioritized, concrete recommendations. beacon insights · GET …/insights.
• Dependency engine (@beacon/dependency-engine) — current / outdated / unmaintained across npm · PyPI · crates.io. beacon dependencies.
• Team health (@beacon/analytics) — bus factor, maintainer load, contribution distribution. beacon contributors · GET …/contributors.
• Plugins (@beacon/plugins) — extensibility foundation (analyzers / metrics / widgets / recommendations).
• Event timeline — webhooks record RepositoryEvents and re-score; read it with beacon history or GET …/events.

Install the CLI: npm install -g @beacon/cli. MIT licensed, self-hostable with docker compose up.

Beacon 1.0.0

Beacon 1.0.0

The complete developer platform: CLI + API + web dashboard + widgets + SDK, backed by a background worker.

Install the CLI

npm install -g @beacon/cli
beacon analyze facebook/react

Highlights

• First-class beacon CLI: login, analyze (incl. --local offline), score, report, widget, badge, watch, init, interactive dashboard TUI.
• @beacon/sdk for programmatic use.
• Fastify API with GitHub App webhooks, SVG widget/badge endpoints, and health-history trends.
• Background worker (BullMQ) that re-scores on repo events.
• Focused packages: shared, github, ai, analytics, widgets, ui, database.

Self-host with docker compose up. MIT licensed.