Fix/install no releases npm#695
Open
Andersonlimahw wants to merge 4 commits into
Open
Conversation
…meworks (#1) * feat: full-stack/frontend/mobile stack — security hardening + new frameworks Security (Prompt Injection Review): - MCP input enforcement: reject oversized query/task/symbol (>10k chars) with clear error instead of silent truncation — fixes mcp-input-limits test suite - FTS5 query sanitization: add null-byte and column-separator stripping - Server instructions + instructions-template: explicit anti-prompt-injection section warning agents not to follow directives embedded in indexed code Username: colbymchenry → andersonlimahw (30 files: package.json, README, CLAUDE.md, install scripts, src/, tests/, site/, scripts/, CHANGELOG.md) Framework Stack (removed from registry, kept for compat): - Django, Flask, Laravel, Drupal (PHP web frameworks) - Axum, Actix, Rocket (Rust web frameworks) - Vapor (server-side Swift) - Rails (Ruby) Framework Stack (new resolvers added): - angular.ts: Routes config, @component nodes, services/guards/pipes/modules - react-query.ts: useQuery/useMutation hooks, queryKey factories, queryFn links - bun.ts: Bun.serve(), Elysia route handlers (tsx/jsx aware) - react-native.ts: React Navigation screens, Expo Router file routes (tsx/jsx) - android.ts: @composable, NavHost routes, Retrofit @GET/@post, ViewModel/DAO - ios.ts: SwiftUI NavigationStack/Link, @model (SwiftData), UIKit VCs Tests: - Resolution: Laravel detect test → Angular detect test - Frameworks integration: Django/Flask e2e → Angular + React Native e2e - All new resolvers have TypeScript language-filter fixes (tsx/jsx included) README: Updated framework coverage table to reflect full-stack/mobile stack CHANGELOG: Added [0.9.5] entry describing all changes https://claude.ai/code/session_015sK2LpNExFwQTUK7vYbi1z * fix: all tests green + CLAUDE.md AI principles + README author section Test fixes (11 → 0 failures): - sync.test.ts: git('config','commit.gpgsign','false') in beforeEach — global git config has signing enabled (CI), causing git commit to fail in temp repos - extraction.test.ts: same fix for submodule + nested-git-repo tests (lib, main, sub_repo1 all need local gpgsign=false before committing) - glyphs.test.ts: add TERM:undefined to withEnv in 'returns Unicode glyphs on macOS' — host has TERM=linux which forces ASCII even when platform=darwin - drupal.test.ts: skip e2e test with explanatory comment — drupalResolver was removed from FRAMEWORK_RESOLVERS in the stack pivot; unit tests still pass CLAUDE.md — AI/LLM Development Principles (new section): - Karpathy rules: describe intent not steps, verify every output, small atomic diffs, read the output, iterate+abandon fast, explicit > implicit, structured output, temperature discipline, don't fight the model - Token optimisation: explains the core thesis (sufficiency → zero Read/Grep), what works (trace, explore-flow, synthesizers) vs what fails (steering via descriptions, half-bridged flows) - Prompt injection defence: documents all mitigations in tools.ts, queries.ts, server-instructions.ts, instructions-template.ts with invariants for new tools - Test isolation rules: gpgsign=false + TERM=undefined for new contributors - Module layout: updated framework list to match new full-stack/mobile registry README.md — About the Author: - Anderson Lima section with bio, badge links (lemon.dev.br, X, LinkedIn, GitHub) - Current projects: Lemon.dev, IgnitionStack, VibingCash, Neutrix - Stack badges: TypeScript, React, Next.js, Node.js, Supabase, AI/LLM https://claude.ai/code/session_015sK2LpNExFwQTUK7vYbi1z * refactor: rename package to @andersonlimahw/lemon-codegraph + add fork attribution - Rename npm package from @andersonlimahw/codegraph to @andersonlimahw/lemon-codegraph in package.json, package-lock.json, all source files, tests, scripts, and docs (22 files) - CLI binary name 'codegraph' unchanged for backward compatibility - Add fork attribution blockquote in README.md referencing colbymchenry/codegraph - Update CLAUDE.md Project Overview with fork attribution - GitHub repo URLs and artifact filenames (codegraph-linux-x64.tar.gz) left unchanged https://claude.ai/code/session_015sK2LpNExFwQTUK7vYbi1z --------- Co-authored-by: Claude <noreply@anthropic.com>
…name (#2) * chore: update all GitHub repo URLs to andersonlimahw/lemon-code-graph Reflects the repository rename on GitHub. Replaces `andersonlimahw/codegraph` with `andersonlimahw/lemon-code-graph` in install scripts, site, source, tests, and docs. CLI binary name and npm package name unchanged. https://claude.ai/code/session_015sK2LpNExFwQTUK7vYbi1z * chore: update repo URLs in README, scripts, and site components * chore: update repo URLs in npm-shim and site Astro components * chore: update repo URL in site SocialIcons and landing page * chore: update repo URL in landing page index.astro * chore: update repo URLs in CHANGELOG and CLAUDE.md * chore: update repo URLs in CHANGELOG and CLAUDE.md * feat: add Ktor framework resolver and improve Java extractor * test: add Ktor resolver tests (6 cases covering routes, handlers, @resource, Application.module)
…tall-from-git path - install.sh: remove -f from curl version resolution (avoids curl 56/22 abort on 404); redirect 2>/dev/null; show actionable error with npm/source fallback instructions - install.ps1: wrap Invoke-RestMethod in try/catch; same user-friendly error message - package.json: add "prepare": "npm run build" so `npm install -g github:...` works - README.md: update Get Started with Option A (github:, works now) / B (bundled, needs release) / C (npm, needs release) - PLAN_NPM.md: step-by-step checklist to publish npm packages and create GitHub Releases
- Get Started: add Option A/B/C with clear status (Option A works now) - Quick Start: use `npm install -g github:...` as primary install command - Framework Coverage: add Ktor (routing DSL + @resource annotations) - Troubleshooting: update reinstall command to working github: URL
treytracedit-lab
approved these changes
Jun 5, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.