assetfare-mcp 1.21.6
GitHub releaseSource-backed
Why it matters: One of a run of ships in the 30 days to it: building continued, not a one-off.
Security hardening release. Pins fast-uri 3.1.9, ip-address 10.7.5, and stream-json 3.7.0 while preserving the compatible Solana web3.js 1.x API. Full test matrix passes and root production npm audit reports zero vulnerabilities. Non-custodial and no-sign/no-submit boundaries… Show allShow less
Security hardening release. Pins fast-uri 3.1.9, ip-address 10.7.5, and stream-json 3.7.0 while preserving the compatible Solana web3.js 1.x API. Full test matrix passes and root production npm audit reports zero vulnerabilities. Non-custodial and no-sign/no-submit boundaries are unchanged.
Record ship:e226ccf3… · HEY counts it as building; it does not judge the release’s quality.
Release, read from the team’s GitHub · no deployment linked
- What it names
- The team’s release names it: “assetfare-mcp 1.21.6” (v1.21.6).
- Stage
- A release is code the team published; HEY has not observed it deployed unless a link below says so.
- Reported by
- Read from the team’s GitHub. Independently recorded: a package version published from the same repository matches it (npm assetfare-mcp@
1.21.6). - Release and deployment
- Not established: the text HEY holds names none of the project’s contracts. Timing alone never links a release to a deployment.
- Activity
- No contract is tied to this change, so no product activity is attributed to it. Product usage is read on its own.
- When
- The source dates it 2026-10-25 16:45 UTC; HEY first knew on 2026-10-25.
- Not known
- HEY does not hold the commit the release was cut from.
- HEY has not observed a deployment of this change.
- Not established: the text HEY holds names none of the project’s contracts. Timing alone never links a release to a deployment.
Evidence: ship record
A ship says what was shipped and where HEY read it. It is not a judgement of quality, of the team, or of what the token will do.