Changelog

What's new in md4ai

v0.10.3

9 Mar 2026
  • Security: path traversal protection in import-bundle and file deletion
  • Security: PID validation before killing database-sourced watcher processes
  • Security: credential file permissions hardened (0600 enforced on all writes)
  • Security: ZIP bomb protection — bundles over 50 MB rejected
  • Security: marketplace plugin installPath validated against expected base
  • Security: database constraint prevents path traversal in device_paths
  • Added Google Analytics 4 and Google Search Console support
  • Added cookie consent banner (GDPR compliant)
  • Added privacy policy and terms of service pages
  • Added health check endpoint at /api/health
  • Added changelog page
  • Added README to npm package

v0.10.2

8 Mar 2026
  • Discover and display marketplace plugin skills (Superpowers, etc.)
  • Show plugin skills in the Skills Comparison table with marketplace column
  • New Marketplace Plugins section with cards grouped by marketplace
  • Plugin homepage links (GitHub deep-links for official marketplace)
  • Capture all graph-discovered files in folder_files (was only 3, now all)
  • Added synced_at timestamps to folder_files for scan freshness visibility
  • Added build stamp to dashboard footer for deploy verification
  • Convert WSL Linux paths to UNC paths in PowerShell export script
  • Export all graph nodes in AI review, not just captured files

v0.10.1

5 Mar 2026
  • Added Export for AI Review feature on Claude Files tab
  • Flat file export naming with double-dash separator
  • Triple the height of the export prompt text area

v0.10.0

3 Mar 2026
  • MCP server status monitoring dashboard
  • Preflight script viewer tab
  • Environment health checks with Vercel and GitHub Secrets integration
  • Software versions tracking with latest/beta comparison
  • Team sharing and collaboration features
Build: 9fb6a14 · 13 Mar 26, 23:02