Week of Oct 19 – Oct 25, 2026

New extensions 83

• @bixu/cull 2026.10.22.1 · source

  A new extension, @bixu/cull, was added in its first release, version 2026.10.22.1. It provides a single method, cull, which scores a Canon R5 II card or ingest folder by sharpness and in-camera rating and copies the keepers.

• @bixu/invariant-encoding-check 2026.10.22.1 · source

  The new invariant-encoding-check extension, first released as 2026.10.22.1, adds a check method that fails CI when a changed model file leaves a known invariant unencoded in its zod schema. It also provides shared zod schemas for Sha256Digest, Platform, and SshFingerprint.

• @bmonty/text-entropy 2026.10.22.1

  A new extension, @bmonty/text-entropy, was released as version 2026.10.22.1. It adds one method, analyze, which measures the Shannon entropy of a piece of text.

• @cachehit/techdocs 2026.10.23.1 · source

  This is a first release of @cachehit/techdocs, which adds four methods for searching and building AI context from a Hugo documentation site, including get_doc, search, sync, and build_context. It reads content from a GitLab repository or a local checkout and supports Docsy or other Hugo themes.

• @figy/blog 2026.10.24.2 · source

  A new extension, @figy/blog, first released as version 2026.10.24.1 and updated to 2026.10.24.2 within this window. It renders Markdown posts from an Obsidian vault folder and publishes them on Cloudflare Pages.

• @hmcrum/nfl-player-stats 2026.10.22.1 · source

  New extension @hmcrum/nfl-player-stats (first release, version 2026.10.22.1) reads real NFL player box-score statistics from ESPN's public summary endpoint, and adds two methods: box_score and week_stats.

• @keeb/exa 2026.10.24.1 · source

  The @keeb/exa extension, first released as version 2026.10.24.1, adds two methods for agents: search, which runs any Exa web search, and find_people, which looks up LinkedIn profiles in bulk by running one people-category search per person.

• @keeb/scenerules 2026.10.25.1 · source

  @keeb/scenerules is a first release that mirrors scenerules.org as a swamp model, providing the full ruleset catalogue, site and document pages, full-text search, and rule lookup by number.

• @magistr/mitmproxy 2026.10.25.10 · source

  A new extension, @magistr/mitmproxy, was published as its first release and adds seven methods for installing, starting, stopping, and inspecting a local mitmproxy HTTP/HTTPS intercepting proxy, plus trusting its CA and clearing captured flows.

• @magistr/openssl 2026.10.25.10 · source

  The @magistr/openssl extension is a first release, adding eight methods that inspect, create, sign, verify, and convert X.509 material through the local openssl CLI: convert, csr, genkey, inspect, selfsign, sign, verify, and version. The later 2026.10.25.10 version is a repo-wide republish with no functional change.

• @puddleworks/puddleworks-factory 2026.10.23.1 · source

  This is the first release of the Puddleworks Factory extension, version 2026.10.23.1. It adds a draft.run method that builds the first draft of a swamp app from an app spec, which can be read from a file, a URL, or inline JSON, and can prefill that spec from an agreed outcome spec.

• @reset/buildq 2026.10.24.1 · source

  This is a first release of @reset/buildq, a client for driving a buildq coordinator over its HTTP API in a Buildkite-style shape. It adds eleven methods for listing and reading builds, job logs, artifacts and annotations, the queue and agents, and for rebuilding, cancelling and unblocking builds.

• @reset/cheapshark-deals 2026.10.24.1

  A new first release, version 2026.10.24.1, adds the @reset/cheapshark-deals extension, which records PC game prices across CheapShark's stores and flags price drops. It provides three methods: sample, search, and summarise.

• @reset/crates-downloads 2026.10.24.1

  Records crates.io crate downloads and versions over time through two methods, sample and summarise. This is the extension's first release, version 2026.10.24.1.

• @reset/discord-webhook 2026.10.22.2

  This is a first release of the @reset/discord-webhook extension, version 2026.10.22.2, that adds a single method, send, for posting a message with embeds to a Discord webhook from a workflow.

• @reset/dockerhub-pulls 2026.10.24.1

  The new @reset/dockerhub-pulls extension, first released as version 2026.10.24.1, records Docker Hub image pulls, stars and tags over time. It adds two methods: sample, which takes a snapshot, and summarise, which reports on the recorded data.

• @reset/epic 2026.10.22.2

  The new @reset/epic extension was released at version 2026.10.22.2 and samples Epic Games Store prices and discounts while recording free games. It adds three methods: freeGames, sample, and summarise.

• @reset/fmod 2026.10.24.1 · source

  Adds the first release of @reset/fmod, which drives FMOD Studio's command line tool from Swamp to build sound banks for named platforms, list a project's platforms, banks and events, and run the tool's project validation.

• @reset/forgejo-commits 2026.10.24.1

  A new extension, @reset/forgejo-commits, was released at version 2026.10.24.1. It records a Forgejo or Gitea branch's commits and head over time, and adds two methods: a sample method and a summarise method.

• @reset/forgejo-issues 2026.10.24.1

  A new extension, @reset/forgejo-issues, has been released for the first time at version 2026.10.24.1. It records open issue counts for Forgejo or Gitea repositories over time, and adds two methods: a sample method and a summarise method.

• @reset/forgejo-pulls 2026.10.24.1 · source

  The @reset/forgejo-pulls extension is a first release, version 2026.10.24.1, that drives pull requests on Forgejo or Gitea forges.

• @reset/forgejo-releases 2026.10.22.1

  Records Forgejo and Gitea releases and their asset downloads. Initial release adds two methods: a sample method and a summarise method.

• @reset/forgejo-repo-stats 2026.10.24.1

  A new extension, @reset/forgejo-repo-stats, was released at version 2026.10.24.1. It records star and counter values for Forgejo or Gitea repositories over time, and adds two methods: sample, which captures the values, and summarise, which reports on them.

• @reset/github-releases 2026.10.22.1

  This is the first release of the @reset/github-releases extension, version 2026.10.22.1. It records GitHub releases and asset downloads and summarises them, through two methods: sample and summarise.

• @reset/godot 2026.10.24.1 · source

  First release of this extension, which drives the Godot 4 editor headlessly from its command line. It adds methods to read the engine version and project settings, reimport assets, read export presets, export a preset, and parse GDScript files, each written as a resource.

• @reset/godot-assets 2026.10.23.1

  This is a new extension, @reset/godot-assets, first released as version 2026.10.23.1. It records versions and ratings of Godot Asset Library assets over time, with two methods added: sample and summarise.

• @reset/gog 2026.10.22.2

  The @reset/gog extension is a first release, now at version 2026.10.22.2, that samples a GOG product's store data and summarises its price history. It adds two methods, sample and summarise.

• @reset/hackernews-mentions 2026.10.24.1

  This is a first release of @reset/hackernews-mentions, version 2026.10.24.1. It records Hacker News mentions of a game, studio or product, and adds two methods: sample and summarise.

• @reset/homebrew-installs 2026.10.24.1

  A new extension, @reset/homebrew-installs, was released as its first version, 2026.10.24.1. It records Homebrew formula and cask installs and versions over time, and adds two methods: a sample method and a summarise method.

• @reset/itch 2026.10.22.2

  Records itch.io games and their channel versions along with what changed, offering three methods: @reset/itch.credentials, @reset/itch.games, and @reset/itch.latest. This is the first release, published as version 2026.10.22.1 and then updated to 2026.10.22.2 within the same window.

• @reset/lemmy-mentions 2026.10.24.1

  Lemmy Mentions is a first release that records Lemmy mentions of a game, studio or product. It adds two methods, sample and summarise.

• @reset/mastodon-hashtags 2026.10.24.1

  This new extension, @reset/mastodon-hashtags, is an initial release that records how often a Mastodon instance's hashtags are used and how many posts they appear in over time. It adds two methods: sample, which collects those hashtag figures, and summarise, which reports on them.

• @reset/modio 2026.10.23.1

  @reset/modio is a new extension, first released as version 2026.10.23.1, that records a game's mods and their mod.io statistics and summarises their growth. It adds two methods, sample and summarise.

• @reset/npm-downloads 2026.10.24.1

  Initial release of @reset/npm-downloads (version 2026.10.24.1), which records daily download counts and latest versions for npm packages over time. It adds two methods, sample and summarise.

• @reset/nuget-downloads 2026.10.24.1

  The @reset/nuget-downloads extension is a new first release, version 2026.10.24.1, that records NuGet package downloads and latest versions over time. It adds two methods, sample and summarise, for collecting and reporting that data.

• @reset/patch-notes 2026.10.22.1

  A new extension, @reset/patch-notes, was released as its first version, 2026.10.22.1. It posts each new patch note for a Steam game to Discord as a separate embed.

• @reset/protondb 2026.10.23.1

  This new extension, @reset/protondb, is an initial release that samples a Steam game's ProtonDB tier and score and summarises them, using the methods sample and summarise.

• @reset/pypi-downloads 2026.10.24.1

  This new extension records daily download counts and latest versions for PyPI projects. It adds two methods: one that produces a sample of the recorded data and one that summarises it.

• @reset/rollbar 2026.10.24.1 · source

  The @reset/rollbar extension is a first release, version 2026.10.24.1, that drives Rollbar-compatible crash-reporting APIs. It can list and read items, occurrences and item events, resolve, mute and assign items, record deploys, and read occurrence, activation and top-item reports, each written as a resource.

• @reset/sentry-issues 2026.10.23.1

  Records a Sentry project's top issues and how their event counts grow over time. Adds two methods, sample and summarise. This is the first release, version 2026.10.23.1.

• @reset/socialq 2026.10.24.1 · source

  The @reset/socialq extension is a first release, adding eight methods that read a socialq deployment over its HTTP API using a Cloudflare Access service token. The methods cover health, token identity, accounts, calendar and recorder coverage, the wrap-up report, daily activity, the job ledger, and the taxonomy.

• @reset/speedrun-leaderboards 2026.10.24.1

  Records speedrun.com leaderboards over time and tracks record changes. This first release, version 2026.10.24.1, adds two methods: a sample method and a summarise method.

• @reset/steam 2026.10.24.1 · source

  The @reset/steam extension is a first release, version 2026.10.24.1, that uploads a game's builds to Steam and sets them live on a branch. It adds four methods: betas, builds, setLive, and upload.

• @reset/steam-achievements 2026.10.22.2

  Initial release of @reset/steam-achievements, version 2026.10.22.2, which adds two methods: sample, to sample a Steam app's achievement unlock rates, and summarise, to summarise those rates. The window also includes version 2026.10.22.1.

• @reset/steam-news 2026.10.22.2

  New extension that records a Steam app's news and patch notes and flags newly posted items. Its initial release shipped as versions 2026.10.22.1 and 2026.10.22.2, adding fetch and list methods.

• @reset/steam-players 2026.10.22.1

  A new extension, @reset/steam-players, samples a Steam app's concurrent player count and summarises the history, with methods sample and summarise.

• @reset/steam-reviews 2026.10.22.2

  The @reset/steam-reviews extension is a new first release, now at version 2026.10.22.2 after a earlier 2026.10.22.1 build. It adds two methods: sample, which records a Steam app's review score, and summarise, which summarises that score history.

• @reset/steam-workshop 2026.10.22.1

  The new @reset/steam-workshop extension, released as version 2026.10.22.1, samples a Steam Workshop item's public stats and summarises them. It adds two methods: sample and summarise.

• @reset/steamspy 2026.10.23.1

  This first release of @reset/steamspy adds two methods, sample and summarise, for sampling an app's SteamSpy estimates and summarising how they change over time.

• @reset/steamworks-builds 2026.10.23.1

  A new extension, @reset/steamworks-builds, was released as version 2026.10.23.1 to record a Steam app's branches and builds and how they move between them. It adds two methods, sample and summarise.

• @reset/steamworks-sales 2026.10.23.1

  A new extension, @reset/steamworks-sales, makes its first release at version 2026.10.23.1. It records a Steam partner's daily sales aggregates through a sample method and summarises them with a summarise method.

• @reset/steamworks-wishlists 2026.10.23.1

  The @reset/steamworks-wishlists extension is a new first release, version 2026.10.23.1, that records and summarises a Steam app's daily wishlist activity. It adds two methods, sample and summarise.

• @reset/twitch-viewers 2026.10.23.1

  A new extension, @reset/twitch-viewers, ships its first release (2026.10.23.1) to record and summarise a game's live Twitch streams and viewer counts. It adds two methods: sample and summarise.

• @reset/unity 2026.10.24.1 · source

  This is a first release of the @reset/unity extension, published as version 2026.10.24.1.

• @reset/workq 2026.10.24.1 · source

  The first release of @reset/workq, published as version 2026.10.24.1, adds eleven methods for driving workq's work-tracking API as a service caller.

• @reset/wwise 2026.10.24.1 · source

  The @reset/wwise extension is a first release, version 2026.10.24.1, that drives an open Wwise Authoring instance through WAAPI over WAMP.

• @skunk-ape/hermes 2026.10.25.1 · source

  This is the first release of @skunk-ape/hermes, which runs Hermes agents on macOS or Linux with each agent confined to its own directory by a nono sandbox.

• @skunk-ape/web-brief 2026.10.24.1 · source

  The @skunk-ape/web-brief extension is a new initial release, version 2026.10.24.1, that gives an autonomous agent web access without a browser. It adds two methods, fetch and summarize.

• @sntxrr/docker-ps 2026.10.25.1 · source

  This is the first release of @sntxrr/docker-ps, now at version 2026.10.25.1, and it adds one method, host.ps. The extension provides a read-only listing of containers on a Docker host over SSH, scoped narrowly enough for an unattended triage agent to use.

• @sntxrr/log-tail 2026.10.25.1 · source

  This is a first release of @sntxrr/log-tail, now at version 2026.10.25.1. It reads the last lines of a log selected by name from an allowlist fixed in the model definition, with secret values redacted. It adds two methods: allowlist.list and allowlist.tail.

• @sntxrr/traefik 2026.10.25.1 · source

  A first release of @sntxrr/traefik, version 2026.10.25.1, adds three methods: instance.bump, instance.check and instance.inspect.

• @sntxrr/uptime-kuma 2026.10.25.1 · source

  A new extension, @sntxrr/uptime-kuma, provides read-only access to Uptime Kuma monitor history for triage. It returns the last N heartbeats for one monitor, including status, time, message, and ping, along with a summary of current status, when it last changed, and how many changes occurred in the window.

• @svendowideit/cloudflare-pages-wrangler 2026.10.24.2 · source

  The new extension @svendowideit/cloudflare-pages-wrangler is a first release, now at version 2026.10.24.2, that adds methods for deploying sites directly to Cloudflare Pages without a Git repository, creating projects, and binding custom domains.

• @svendowideit/markdown2html 2026.10.24.2 · source

  This is a first release of @svendowideit/markdown2html, version 2026.10.24.2 in the window, which adds the generate method. It renders Markdown files into a static HTML site with an index page, without requiring Python or special content markers.

• @svendowideit/s3-archive-planner 2026.10.25.1 · source

  A new extension, @svendowideit/s3-archive-planner (version 2026.10.25.1, first release), plans an Australian photo and video archive on Amazon S3.

• @svendowideit/ssh-key-inventory 2026.10.24.2 · source

  A new extension, @svendowideit/ssh-key-inventory, was published as its first release at version 2026.10.24.2. It inventories, assesses and helps safely replace SSH private keys across hosts reachable from a control account, producing an HTML report with per-key remediation advice.

• @swamp/aws/licensemanagerusersubscriptions 2026.10.25.1 · source

  The new @swamp/aws/licensemanagerusersubscriptions extension ships AWS License Manager User Subscriptions infrastructure models, with a license_server_endpoint model that provides create, delete, get, list, sync and update methods.

• @swamp/cve — 4 packages

  Initial release that adds methods to scan and mitigate Linux, macOS, and Windows hosts and Linux containers still trusting eight eMudhra intermediate CAs whose private keys were compromised, plus a fleet-wide scan.

  emudhra, http2shell, php-rce-2026-10, tailworm

• @swamp/gcp/deepreview 2026.10.23.1 · source

  Google Cloud deepreview models are added in this first release, covering documents and document reviews with create, get, list, sync, and delete operations. The 2026.10.23.1 version also includes updates to the documents and documents-reviews models.

• @taylor/emudhra 2026.10.22.6 · source

  Initial release of an extension whose exposure.scan method checks where the leaked private keys of eight compromised eMudhra certificate authorities can still be used against you.

• @taylor/libvirt 2026.10.24.2 · source

  A new extension, @taylor/libvirt (first release, version 2026.10.24.2), sets up an Ubuntu host to run KVM/QEMU virtual machines via libvirt. It provides check and apply methods for the host packages and user groups, directory storage pools, networks, uplinks, and virtual machines.

• @vcjdeboer/opentofu 2026.10.23.2 · source

  The @vcjdeboer/opentofu extension is a first release that adds methods to plan, apply, initialize, validate, read outputs from, and check the version of OpenTofu, with plan and apply gated by a sha-bound check. Versions 2026.10.22.1 through 2026.10.23.2 were published in this window.

• @vcjdeboer/quarto-deck 2026.10.23.2 · source

  Initial release of @vcjdeboer/quarto-deck, a tool for making Quarto reveal.js lecture decks build the same way each time and keep a record of how each was built. It adds 16 methods covering rendering, PDF and PPTX export, PPTX import and inspection, slide and source management, outlining, and checks.

• @webframp/anthropic/admin 2026.10.21.1 · source

  The @webframp/anthropic/admin extension is a first release that lets you manage members of a Claude Enterprise organization through the Admin API, including reading members, custom roles, and RBAC groups, adding members to groups, and switching members between User and Custom roles.

• @webframp/aws/php2shell-hunt 2026.10.22.1 · source

  A new AWS extension, @webframp/aws/php2shell-hunt (version 2026.10.22.1), is an initial release that checks AWS accounts for exposure and indicators of compromise tied to the PHP2Shell vulnerabilities CVE-2026-109618 and CVE-2026-109619.

• @webframp/editorial-review 2026.10.21.1 · source

  A new extension, @webframp/editorial-review, was released at version 2026.10.21.1. It reviews prose against a bundled set of editorial principles, using a model pass with an optional second pass, and produces structured findings plus a revised draft with a report.

• @webframp/presentation 2026.10.21.1 · source

  Introduces @webframp/presentation, a first release that builds reveal.js 6.0.1 decks from Org or Markdown, stores each build, outline and PDF as versioned swamp data, and adds build, outline and export_pdf methods.

• @zts/cataas 2026.10.25.2 · source

  A new extension, @zts/cataas, was first released in version 2026.10.25.1 and updated to 2026.10.25.2, adding one method, random, which fetches a random cat image from the Cat as a Service site.

• @zts/text-entropy 2026.05.31.1

  The new @zts/text-entropy extension is a first release, version 2026.05.31.1, that measures the Shannon entropy of a piece of text. It adds one method, analyze.

• @zts/trello-tracker 2026.10.25.1 · source

  A new extension, @zts/trello-tracker, makes its first release (version 2026.10.25.1) as a stagecraft tracker that keeps a factory's tickets on one Trello board, with cards as tickets, open lists as statuses, and labels as ticket types. It adds two methods, describe and operate.

Updated 596

• @bad-at-naming/libvirt 2026.10.15.9 → 2026.10.25.10 · source

  The @bad-at-naming/libvirt extension moved from 2026.10.15.9 to 2026.10.25.10, adding VM provisioning from cloud images, a read-only serial console capture method, and a desired-state plan/sync reconciler.

• @bixu/github 2026.05.05.1 → 2026.10.22.1 · source

  The @bixu/github extension moved from 2026.05.05.1 to 2026.10.22.1, dropping the GitHub Actions models and helpers and adding a shared helpers file with normalizers for repos, issues, PRs, and members.

• @bixu/github-security 2026.04.23.2 → 2026.10.22.1 · source

  Version 2026.10.22.1 of @bixu/github-security replaces the scanOrg and scanUser methods with namespaced versions and adds a github_security_helpers.ts file that handles org and user repo security scans, including detection of security apps and check suites.

• @bixu/homekit 2026.04.24.1 → 2026.10.22.1 · source

  @bixu/homekit moves from 2026.04.24.1 to 2026.10.22.1 and gains a new homekit_hap.ts module, a pure TypeScript HAP protocol implementation with TLV8, SRP-6a, and pairing support.

• @bixu/honeycomb 2026.05.04.1 → 2026.10.22.1 · source

  The @bixu/honeycomb extension moved from 2026.05.04.1 to 2026.10.22.1 and gained a shared helper module, honeycomb_helpers.ts, which adds API key validation, request building, and v1 and v2 Honeycomb API support.

• @bixu/k8s/exec 2026.04.23.2 → 2026.10.22.1 · source

  The @bixu/k8s/exec extension moved from version 2026.04.23.2 to 2026.10.22.1, adding an MIT license and a manifest paths setting and removing an empty drivers list.

• @bixu/photos 2026.06.07.4 → 2026.10.22.1 · source

  Version bump to 2026.10.22.1 with no code file changes. The manifest adds an MIT license field and drops an empty drivers list, and the three method names are listed as renamed with a package prefix.

• @bixu/slack 2026.04.23.3 → 2026.10.22.1 · source

  Version bump.

• @bixu/tailnet-healthcheck 2026.04.23.2 → 2026.10.22.1 · source

  updated dependencies.

• @bixu/zfs 2026.04.23.1 → 2026.10.22.1 · source

  Version bump.

• @dataverket/sops 2026.09.20.2 → 2026.10.19.1 · source

  Version bump.

• @dmc/patch 2026.10.16.1 → 2026.10.25.1 · source

  Version bump.

• @dmc/proxmox 2026.10.01.1 → 2026.10.25.1 · source

  Version bump.

• @figura/zabbix 2026.09.10.1 → 2026.10.23.1 · source

  The @figura/zabbix extension moved from 2026.09.10.1 to 2026.10.23.1 and gained four methods for dashboards and template linkage: list_dashboards, get_dashboard, update_dashboard (which backs up the prior state and supports dryRun), and get_template_linkage.

• @keeb/alpine 2026.10.15.1 → 2026.10.15.2 · source

  Version 2026.10.15.2 of @keeb/alpine (up from 2026.10.15.1) adds three methods: install, deployApkovl and provision. The install method gains input validation for hostname, disk and DNS settings, password handling through stdin, a new SSH target check, and an upgrade entry for its model.

• @keeb/docker 2026.10.15.1 → 2026.10.15.2 · source

  Version bump.

• @keeb/mal 2026.07.18.1 → 2026.10.23.1 · source

  updated labels.

• @keeb/minecraft 2026.10.15.1 → 2026.10.15.2 · source

  The @keeb/minecraft extension moved from version 2026.10.15.1 to 2026.10.15.2 and added two behaviors, with 14 new methods across the installer and server models.

• @keeb/mms 2026.07.18.1 → 2026.10.25.2 · source

  Version 2026.10.25.2 of @keeb/mms adds a deterministic route for placing new shows in the organizer, filler-word-insensitive similar-directory matching, and Ollama health checks only when the LLM is needed.

• @keeb/nginx 2026.10.15.1 → 2026.10.15.2 · source

  Version bump.

• @keeb/prometheus 2026.10.15.1 → 2026.10.15.2 · source

  @keeb/prometheus moved from 2026.10.15.1 to 2026.10.15.2. The release adds input validation for VM names, URLs, hosts, users and paths, refactors the SSH helpers, and adds a valid-ssh-target check, a new `validate.ts` module and eight methods across the agent and hub models.

• @keeb/proxmox 2026.10.15.1 → 2026.10.15.2 · source

  Version 2026.10.15.2 of @keeb/proxmox adds 14 methods covering Proxmox API auth, node status and storage/ISO listing, and VM create, delete, lookup, start, stop, sync, boot order, config and SPICE connect.

• @keeb/tailscale 2026.10.15.1 → 2026.10.15.2 · source

  Version bump.

• @kneel/nextcloud 2026.07.20.7 → 2026.10.19.1 · source

  Version 2026.10.19.1 of @kneel/nextcloud adds lock_file, unlock_file and lock_status methods for the Nextcloud Files Lock app, and a serverInfo method and resource that read instance health from the OCS serverinfo app. It also makes share_with fields nullable and removes an empty drivers entry from the manifest.

• @magistr/anime-cron 2026.10.18.1 → 2026.10.25.10 · source

  Modified 1 behaviors.

• @magistr/dawarich 2026.10.15.9 → 2026.10.25.10 · source

  The @magistr/dawarich extension gained a `recalculate` method that queues a tracks, stats and digests rebuild on a Dawarich instance, optionally for a single year, and records the outcome in a new `recalculation` resource.

• @magistr/diskio 2026.10.15.9 → 2026.10.25.10 · source

  Version bump.

• @magistr/issue-lifecycle 2026.10.15.9 → 2026.10.25.10 · source

  Modified 1 skills.

• @magistr/led-badge 2026.10.15.9 → 2026.10.25.10 · source

  updated binaries.

• @magistr/music-library 2026.10.15.9 → 2026.10.25.10 · source

  Version bump.

• @magistr/telegram-send 2026.10.15.9 → 2026.10.25.10 · source

  Added 1 webhooks.

• @maphew/agent-task 2026.10.15.1 → 2026.10.23.1 · source

  The @maphew/agent-task extension was updated from 2026.10.15.1 to 2026.10.23.1, adding a `run` method that launches a single headless agent with no git work and a sandbox worktree option for dispatch, plus `sandboxes` and `pruneSandboxes` methods.

• @maphew/bd 2026.10.15.2 → 2026.10.21.1 · source

  adds 1 method(s); Modified 1 behaviors.

• @maphew/housekeeping 2026.10.15.4 → 2026.10.23.1 · source

  Version bump.

• @maphew/pr-sweep 2026.10.15.2 → 2026.10.23.1 · source

  Extension @maphew/pr-sweep moved from 2026.10.15.2 to 2026.10.23.1, with the window containing 2026.10.18.1 and 2026.10.23.1.

• @maphew/pr-sweep-config 2026.10.15.2 → 2026.10.23.1 · source

  Version bump.

• @maphew/repo-doctor 2026.10.15.2 → 2026.10.23.1 · source

  Version 2026.10.23.1 of @maphew/repo-doctor adds a checkWorkflowWiring method that flags workflow scripts missing an exec bit or shebang and schedules without a live registration, plus a checkScaffolding method that typechecks agent scaffolding directories and reports findings separately.

• @maphew/swamp-tide 2026.10.15.3 → 2026.10.15.4 · source

  updated binaries.

• @skunk-ape/stef 2026.08.16.1 → 2026.10.24.1 · source

  Version bump.

• @sntxrr/b2-bucket 2026.10.14.1 → 2026.10.22.1 · source

  Version bump.

• @sntxrr/b2-key 2026.10.14.1 → 2026.10.22.1 · source

  Version bump.

• @sntxrr/cloudflare-x402 2026.10.14.1 → 2026.10.24.1 · source

  Version bump.

• @sntxrr/credential-expiry 2026.10.14.1 → 2026.10.22.1 · source

  Version 2026.10.14.1 moved to 2026.10.22.1 of the credential-expiry extension, which adds a per-entry `secretRef` option so an unreadable vault secret is reported as its own finding instead of stopping the audit.

• @sntxrr/docker-reclaim 2026.10.14.1 → 2026.10.24.2 · source

  Version bump.

• @sntxrr/glinet-kvm 2026.10.18.2 → 2026.10.19.1 · source

  The glinet-kvm extension moved from 2026.10.18.2 to 2026.10.19.1 and split reads from writes: atx and msd now only report state or record a plan, while new atxPress and msdChange methods perform the actions after live pre-flight checks for ATX board presence, virtual media enablement, and busy status.

• @sntxrr/jetkvm 2026.10.18.2 → 2026.10.19.2 · source

  adds 1 method(s); Modified 1 behaviors.

• @sntxrr/restic-repository 2026.10.14.1 → 2026.10.22.1 · source

  Version bump.

• @sntxrr/swamp-triage 2026.10.14.1 → 2026.10.22.1 · source

  adds 1 method(s); Modified 1 behaviors.

• @sntxrr/vikunja-kanban 2026.10.15.1 → 2026.10.23.1 · source

  Version 2026.10.23.1 of @sntxrr/vikunja-kanban adds a stagecraft tracker model, a create_label method that creates labels idempotently, and a truncated flag on board reads and reorder plans that reports when a page cap cut the data short.

• @svendowideit/curl 2026.10.11.2 → 2026.10.23.1 · source

  updated platforms.

• @svendowideit/ebooks 2026.10.18.2 → 2026.10.24.2 · source

  Version bump.

• @svendowideit/llama-cpp 2026.10.16.6 → 2026.10.22.1 · source

  Version 2026.10.22.1 adds an optional Caddy integration: a new ensure-caddy-proxy method and caddyModelName and caddyRouteHostname global arguments, which declare a reverse-proxy route to the served model's localhost port when a @svendowideit/caddy model is present.

• @svendowideit/web-cache 2026.09.25.1 → 2026.10.24.2 · source

  Version 2026.10.24.2 of the web-cache extension adds optional bearer-token auth read from a 0600 file, a run-scoped origin-fetch budget via budgetId and maxFetches, and a resultName option, plus a capped output flag and new cache-info, get-json, get-many and invalidate methods.

• @svendowideit/wikidata 2026.09.20.3 → 2026.10.24.2 · source

  Version 2026.10.24.2 of @svendowideit/wikidata (from 2026.09.20.3) is now a fetch-free client that can also build Wikimedia Enterprise request plans and read Enterprise-cached entities, with a new fetch-entity workflow and an added curl dependency.

• @svendowideit/wikipedia 2026.09.20.4 → 2026.10.24.2 · source

  Version 2026.10.24.2 reworks the Wikipedia/Wikidata client into a fetch-free domain client that reads from the shared web cache and can also use Wikimedia Enterprise article URLs when credentials and local quota allow.

• @swamp/agent-runner 2026.10.17.3 → 2026.10.23.1 · source

  Version bump.

• @swamp/aws — 293 packages

  Across 293 AWS extensions, versions moved from 2026.10.13.1 to 2026.10.25.1, mostly with resource updates and some additions. Shared code bumped the CloudControl SDK and zod, made create-only filtering match nested paths, and added an AGPL-3.0-or-later license field.

  accessanalyzer, accountaccess, acmpca, agentregistry, aiops, amazonmq, amplify, amplifyuibuilder, apigateway, apigatewayv2, appconfig, appfabric, appflow, appintegrations, applicationautoscaling, applicationinsights, applicationsignals, apprunner, appstream, appsync, apptest, aps, arcregionswitch, arczonalshift, athena, auditmanager, autoscaling, autoscalingplans, awsexternalanthropic, b2bi, backup, backupgateway, batch, bcm, bcmdataexports, bcmpricingcalculator, bedrock, bedrockagentcore, bedrockmantle, billing, billingconductor, braket, budgets, cases, cassandra, ce, certificatemanager, chatbot, chime, cleanrooms, cleanroomsml, cloud9, cloudformation, cloudfront, cloudhsm, cloudtrail, cloudwatch, codeartifact, codebuild, codecommit, codeconnections, codedeploy, codeguruprofiler, codegurureviewer, codepipeline, codestarconnections, codestarnotifications, cognito, comprehend, computeoptimizer, config, connect, connectcampaigns, connectcampaignsv2, controltower, cur, customerprofiles, databrew, dataexchange, datapipeline, datasync, datazone, dax, deadline, detective, devopsagent, devopsguru, directconnect, directoryservice, dlm, dms, docdb, docdbelastic, drs, dsql, dynamodb, ec2, ecr, ecs, efs, eks, elasticache, elasticbeanstalk, elasticloadbalancing, elasticloadbalancingv2, elementalinference, emr, emrcontainers, emrserverless, entityresolution, events, eventschemas, eventsv2, evidently, evs, finspace, fis, fms, forecast, frauddetector, fsx, gamelift, globalaccelerator, glue, grafana, greengrassv2, groundstation, guardduty, healthagent, healthimaging, healthlake, iam, identitystore, imagebuilder, inspector, inspectorv2, interconnect, internetmonitor, invoicing, iot, iotanalytics, iotcoredeviceadvisor, iotfleetwise, iotsecuretunneling, iotsitewise, iottwinmaker, iotwireless, ivs, ivschat, kafkaconnect, kendra, kendraranking, kinesis, kinesisfirehose, kinesisvideo, kms, lakeformation, lambda, launchwizard, lex, licensemanager, licensemanagerlinuxsubscriptions, lightsail, location, logs, lookoutequipment, m2, macie, managedblockchain, mediaconnect, mediaconvert, medialive, mediapackage, mediapackagev2, mediatailor, memorydb, mgn, mpa, msk, mwaa, mwaaserverless, neptune, neptunegraph, networkfirewall, networkflowmonitor, networkmanager, networkmonitor, networksecuritymanager, notifications, notificationscontacts, novaact, oam, observabilityadmin, odb, omics, opensearch, opensearchserverless, opensearchservice, organizations, osis, outposts, panorama, paymentcryptography, pcaconnectorad, pcaconnectorscep, pcs, personalize, pi, pinpoint, pipes, polly, pricingplanmanager, proton, qbusiness, qldb, quicksight, ram, rbin, rds, redshift, redshiftserverless, refactorspaces, rekognition, resiliencehub, resiliencehubv2, resourceexplorer2, resourcegroups, robomaker, rolesanywhere, route53, route53globalresolver, route53profiles, route53recoverycontrol, route53recoveryreadiness, route53resolver, rtbfabric, rum, s3, s3express, s3files, s3objectlambda, s3outposts, s3tables, s3vectors, sagemaker, scheduler, scn, sdb, secretsmanager, securityagent, securityhub, securitylake, serverlessrepo, servicecatalog, servicecatalogappregistry, servicediscovery, ses, shield, signer, simspaceweaver, smsvoice, sns, sqs, ssm, ssmcontacts, ssmguiconnect, ssmincidents, ssmquicksetup, sso, stepfunctions, storagegateway, supportapp, supportauthz, synthetics, systemsmanagersap, textract, timestream, transcribe, transfer, translate, uxc, verifiedpermissions, voiceid, vpclattice, wafv2, wellarchitected, wickr, wisdom, workspaces, workspacesinstances, workspacesthinclient, workspacesweb, xray

• @swamp/cloudflare — 86 packages

  The 86 @swamp/cloudflare extensions were updated from their 2026.10.16 or 2026.10.17 versions to 2026.10.23.

  access, addressing, agent-memory, ai-gateway, ai-search, alerting, artifacts, browser-rendering, builds, cache, calls, challenges, cloudforce-one, cni, connectivity, containers, custom-hostnames, custom-pages, cws, d1, data-security, devices, dex, diagnostics, dlp, dls, dns, email, email-security, event-subscriptions, firewall, flagship, gateway, hyperdrive, iam, images, infrastructure, intel, k2, leaked-credential-checks, load-balancing, logpush, logs, magic, managed-defense, members, mnm, moq, mtls-certificates, oauth-clients, one, page-rules, page-shield, pages, payment-methods, pcaps, pipelines, queues, r2, registrar, registrar-sandbox, resource-library, rules, rum, secondary-dns, secrets-store, shares, slurper, smart-shield, spectrum, ssl, sso-connectors, subscriptions, teamnet, tokens, tunnel, urlscanner, vectorize, vuln-scanner, waiting-rooms, web3, workers, workers-kv, workflows, zerotrust, zt-risk-scoring

• @swamp/container-image 2026.10.13.1 → 2026.10.24.1 · source

  Version bump.

• @swamp/cve/dirtyfrag 2026.10.13.1 → 2026.10.24.2 · source

  Version bump.

• @swamp/gcp — 37 packages

  The agentregistry extension moved from 2026.10.13.1 to 2026.10.25.1, adding findings, publishers, skills, and skills-revisions models with 21 new methods, and bumping zod across the models. Most other models in the family only gained no-op "No schema changes" upgrade entries or description text edits.

  agentregistry, androidmanagement, androidpublisher, backupdr, beyondcorp, bigtableadmin, ces, chat, classroom, cloudresourcemanager, composer, compute, contactcenterinsights, curationpartners, dataflow, dataform, datamigration, dataplex, dataproc, devicerun, dialogflow, discoveryengine, displayvideo, firebasedataconnect, iam, looker, networksecurity, oracledatabase, pubsub, redis, run, saasservicemgmt, securesourcemanager, sqladmin, threatintelligence, walletobjects, youtube

• @swamp/gcs-datastore 2026.10.16.5 → 2026.10.24.2 · source

  Version bump.

• @swamp/hetzner-cloud 2026.10.13.1 → 2026.10.23.1 · source

  Modified 11 behaviors.

• @swamp/kubernetes 2026.10.13.1 → 2026.10.25.2 · source

  Version 2026.10.13.1 moved to 2026.10.25.2 across four releases, adding five methods for External Secrets and secret handling (externalsecret forceSync, get, and list; secret ensure and getMeta) and updating labels and one existing behavior.

• @swamp/s3-datastore 2026.10.16.5 → 2026.10.24.2 · source

  Version bump.

• @swamp/ssh 2026.10.16.1 → 2026.10.23.1 · source

  Release 2026.10.23.1 of @swamp/ssh adds an explicit host-key policy (pinned, tofu, accept-new, insecure) and a new repin method, plus an identityContent option that loads keys into a per-call ssh-agent. It also adds exec argv support and atomic copy with mode, owner, and sha256 verification.

• @swamp/stagecraft 2026.10.15.2 → 2026.10.25.2 · source

  Version bump.

• @swamp/vercel — 19 packages

  Nineteen Vercel extensions moved to 2026.10.23 with mostly model updates. Access-groups and aliases gained an allowMissing lookup option that writes misses to a new lookupResult, and aliases marks protectionBypass as sensitive. Where shown, the zod dependency moved from 4.3.6 to 4.6.7.

  access-groups, aliases, certs, deployments, dns, domains, drains, edge-config, environment, feature-flags, kms, networking, organizations, project-members, project-routes, projects, teams, vcr, webhooks

• @tagur/oidc-diagnose 2026.10.15.1 → 2026.10.16.1 · source

  Adds two methods, exchange-code (OAuth2 code exchange with id_token claim checks) and resolve-groups (Entra groups-overage expansion via Graph), plus optional required-claim assertions in decode-token; the read-only methods stay credential-free, and the model's dependency zod moves to 4.6.5.

• @taylor/swamp-training 2026.10.14.2 → 2026.10.22.2 · source

  Version bump.

• @thomas/technitium 2026.10.11.1 → 2026.10.25.1 · source

  adds 1 method(s); Modified 1 behaviors.

• @webframp/ai-usage 2026.10.14.1 → 2026.10.21.1 · source

  Version bump.

• @webframp/anthropic/analytics 2026.10.14.1 → 2026.10.21.1 · source

  Version bump.

• @webframp/anthropic/compliance 2026.10.14.1 → 2026.10.21.1 · source

  Version bump.

• @webframp/artifactory 2026.10.14.1 → 2026.10.21.1 · source

  Version bump.

• @webframp/aurora-datastore-bootstrap 2026.10.14.1 → 2026.10.22.3 · source

  Version bump.

• @webframp/aws — 3 packages

  Three AWS extensions were updated: adopt and securityhub-findings got documentation updates, and securityhub-findings now sorts findings by severity by default with optional sort arguments. terraform-drift reports sensitive-masked values as unverifiable instead of false drift.

  adopt, securityhub-findings, terraform-drift

• @webframp/azure-blob-datastore 2026.10.14.1 → 2026.10.21.1 · source

  Version bump.

• @webframp/azure/openai-usage 2026.10.14.1 → 2026.10.21.1 · source

  Version bump.

• @webframp/cloudflare — 26 packages

  Across 26 Cloudflare extensions, version 2026.10.21.1 changes how API tokens are supplied: a vault reference is now the recommended way to pass them, and secret arguments and returned secrets are now vaulted or stripped.

  access, api-shield, d1, durable-objects, email-routing, gateway, hyperdrive, images, kv, load-balancing, logpush, magic-transit, pages, queues, r2, registrar, rulesets, spectrum, ssl-certificates, stream, tunnel, turnstile, vectorize, waiting-room, workers-ai, workers-scripts

• @webframp/cloudflare 2026.10.14.1 → 2026.10.21.1 · source

  Across 26 Cloudflare extensions, version 2026.10.21.1 changes how API tokens are supplied: a vault reference is now the recommended way to pass them, and secret arguments and returned secrets are now vaulted or stripped.

• @webframp/cloudflare-audit 2026.10.14.1 → 2026.10.21.1 · source

  Version bump.

• @webframp/datadog/synthetics 2026.10.15.1 → 2026.10.21.1 · source

  Version bump.

• @webframp/discourse 2026.10.14.1 → 2026.10.21.1 · source

  Version bump.

• @webframp/exe-dev/vm 2026.10.14.1 → 2026.10.22.1 · source

  Version bump.

• @webframp/falai — 9 packages

  All nine fal.ai extensions moved to 2026.10.21.1, directing users to store the API key in a vault rather than pass it literally and marking the unredacted FAL_KEY fallback as discouraged.

  account, assets, compute, keys, models, organization, serverless, storage, workflows

• @webframp/gcp/vertex-usage 2026.10.14.1 → 2026.10.21.1 · source

  Version bump.

• @webframp/gitlab 2026.10.14.2 → 2026.10.21.3 · source

  Release 2026.10.21.3 of @webframp/gitlab adds two work-item methods, remove_work_item_parent and convert_work_item_type, which use GitLab's GraphQL API. It also rejects non-positive-integer iid values before any request is sent, and updates the README with vault setup steps.

• @webframp/gitlab-datastore-bootstrap 2026.10.14.1 → 2026.10.22.3 · source

  Version bump.

• @webframp/gitlab-review 2026.10.14.1 → 2026.10.22.1 · source

  adds 1 method(s); Modified 1 behaviors.

• @webframp/griptape — 10 packages

  The @webframp/griptape family of 10 extensions moved from 2026.10.14.1 to 2026.10.21.1, with a shared change to the README and API-key docs that now recommend a swamp vault over the GT_CLOUD_API_KEY env var.

  assistants, buckets, data-connectors, knowledge-bases, models, rulesets, secrets, structures, threads, tools

• @webframp/hashicorp-vault 2026.10.14.1 → 2026.10.21.1 · source

  Version bump.

• @webframp/microsoft/teams 2026.10.14.1 → 2026.10.21.1 · source

  Version bump.

• @webframp/pass 2026.10.14.1 → 2026.10.21.1 · source

  Modified 1 vaults.

• @webframp/postgres-datastore 2026.10.14.1 → 2026.10.21.1 · source

  Version bump.

• @webframp/reddit/moderation 2026.10.14.1 → 2026.10.21.1 · source

  Version bump.

• @webframp/redmine 2026.10.14.1 → 2026.10.21.1 · source

  Version 2026.10.21.1 of @webframp/redmine adds `list_attachments` and `download_attachments` methods, which list an issue's attachments and download them with content-type and size filters. It also changes how credentials are handled on redirects and retries, and stops methods from overwriting each other's stored data.

• @webframp/snyk — 20 packages

  The family of 20 @webframp/snyk extensions moved from 2026.10.14.1 to 2026.10.21.1.

  apps, assets, cloud, collections, container-images, groups, inventory, issues, memberships, policies, projects, sast, sbom, self, service-accounts, settings, slack, sso, tenants, tests

• @webframp/terraform 2026.10.14.1 → 2026.10.21.1 · source

  Version bump.

• @webframp/twitch 2026.10.14.1 → 2026.10.21.1 · source

  Version bump.

• @webframp/typesafe-batch 2026.10.14.1 → 2026.10.21.1 · source

  Version bump.

• @webframp/valkey-datastore 2026.10.14.1 → 2026.10.21.1 · source

  Version bump.

Pre-releases (beta and RC) 10

• @figy/cve-daily 2026.10.26.1 · source

  Initial release.

• @magistr/stripe-mpp 2026.10.15.9 → 2026.10.25.10 · source

  Version bump.

• @svendowideit/cve-fleet 2026.10.26.3 · source

  adds 4 method(s); Initial release.

• @svendowideit/dreamhost 2026.10.23.5 · source

  A new extension, @svendowideit/dreamhost, was published at version 2026.10.23.5 after its first release. It provides tools to inventory and back up DreamHost shared-hosting accounts over SSH and to manage DreamHost DNS records through the official API, with 19 methods across DNS and inventory/site operations.

• @svendowideit/network-status 2026.10.25.1 · source

  adds 6 method(s); Initial release.

• @svendowideit/pixiecore 2026.10.24.4 · source

  adds 1 method(s); Initial release.

• @svendowideit/split-dns 2026.10.26.2 · source

  adds 5 method(s); Initial release.

• @svendowideit/ssh-key-inventory 2026.10.24.1 · source

  adds 5 method(s); Initial release.

• @svendowideit/synology-disk-usage 2026.10.25.1 · source

  adds 3 method(s); Initial release.

• @svendowideit/systemd-service 2026.10.02.1 → 2026.10.23.1 · source

  Version bump.

Minor updates

377 extensions published minor updates. Version bumps and changes under 10 lines of code, with no API change.