v0.4.0

0.4.0 (2026-05-12)

Features

• ci: auto-merge release-please + dependabot PRs, supply-chain hardening (#25) (66a287b)
• ci: docs-on-release workflow — auto-refresh README version refs on every release (0cf992f)
• ci: least-privilege token permissions per OpenSSF Scorecard + fix semantic-pr + first-interaction (#27) (ad67791)
• ci: sigstore build provenance attestations on cli/mcp/pysdk publishes (#26) (88802c7)
• ci: tier-1 community-repo polish — stale, semantic-pr, labeler, lychee, release-drafter, scorecard, first-interaction (#22) (5cc39a1)
• pages: intent-clarifying hero (audience grid + counters + MCP snippet + find-your-repo + onboarding) (747004c)
• pages: per-entry "Use this entry" install snippets (146f7cb)

Bug Fixes

• pages: GitHub topbar/source links open in new tab (target=_blank) (f423e78)
• security: codeql triage — harden test fixtures, validate openUrl input, fix scorecard pins (25cee13)

cli: v0.1.3

0.1.3 (2026-05-12)

Bug Fixes

• security: codeql triage — harden test fixtures, validate openUrl input, fix scorecard pins (25cee13)

v0.3.0 — release-please automation + patch bumps

Auto-generated by release-please. See CHANGELOG.md.

Highlights

• release-please automation live (per-component Release PRs auto-open on feat:/fix: commits → merging tags + publishes).
• CLI v0.1.2, MCP v0.1.2, PySDK v0.1.1 republished with check-versions.mjs regression guard.
• Node 18/20 test-glob fix in repo.

No breaking changes. schema_version: 1 unchanged.

v0.2.0 — distribution + protocol + producer integrations

First major iteration since v0.1.0. Same registry shape (schema_version: 1); additive only.

Distribution surface (4 new packages live)

Channel	Install
MCP Registry	io.github.looptech-ai/understand-quickly (https://registry.modelcontextprotocol.io)
npm CLI	npm i -g @looptech-ai/understand-quickly-cli
npm MCP server	npm i -g @looptech-ai/understand-quickly-mcp
PyPI SDK	pip install understand-quickly
GitHub Action	looptech-ai/uq-publish-action@v0.1.0 (Marketplace)

New first-class format

• bundle@1 for repo-context packers (Repomix, gitingest, codebase-digest, …) — text/markdown bundles via JSON manifest sidecar.

New entry fields (all optional, additive)

• nodes_count, edges_count, top_kinds[], languages[] — auto-computed at sync.
• source_sha, head_sha, commits_behind, drift_checked_at — drift detection vs source repo HEAD.
• revoked status — maintainer-only retraction; agents must skip.

New surfaces shipped

• CKGP v1 spec — RFC-style protocol doc at docs/spec/code-graph-protocol.md. Multi-vendor: anyone can run their own aggregator.
• .well-known/code-graph discovery — agents probe a stable URI for graph pointers without going through the registry.
• Per-entry SVG status badges — embed in upstream READMEs at https://looptech-ai.github.io/understand-quickly/badges/<owner>--<repo>.svg.
• stats.json — cross-graph aggregate (totals, kinds, languages, concepts) at https://looptech-ai.github.io/understand-quickly/stats.json.
• MCP tool find_graph_for_repo — agent-ergonomic lookup by GitHub URL.
• MCP search_concepts wired to stats.json — no fan-out, fast.
• Sharded read path — entries/<a-z0-9>.json future-proofs scaling.
• Threat model doc — docs/threat-model.md covering adversarial graphs, dispatch spam, source-repo takeover.
• Body-size adversarial caps — 50MB, 100k nodes, 500k edges, 4096-char labels, depth 32.
• Sitemap, JSON-LD, security.txt, privacy — site/SEO polish.

Producer integrations

• looptech-ai/uq-publish-action@v0.1.0 ships as a Marketplace Action — drops integration PR diff to ~5 lines of YAML.
• GitNexus PR #1425 MERGED — first upstream tool with native publish support.
• Open PRs at code-review-graph, deepwiki-open, repomix, gitingest, codebase-digest, graphify, PocketFlow, codebase-memory-mcp, OpenDeepWiki, awesome-mcp-servers (10 awaiting maintainer review).

Pages site

• Removed overbuilt UX (compare mode, command palette, voice tour, personas, spotlight, path finder, min-degree slider) — reclaimed ~21% LoC.
• Vendored vis-network locally — no CDN dependency.
• Cloudflare Web Analytics integration (token-gated, free).
• Mobile fixes: topbar stacking, sidebar strip, legend collapse, hide-minimap < 700px, label clipping.
• Desktop tour upgrade: side panel + neighbors + outline + step strip.
• Playwright smoke tests (chromium + webkit) on PR.

Infra

• License: Apache 2.0 + Understand-Quickly Data License 1.0.
• Branch protection on main requiring validate + smoke / chromium + smoke / webkit-iphone.
• CodeQL scanning weekly + on PR.
• Dependabot for npm + actions.
• 235 tests across registry / cli / mcp / python-sdk / Playwright.

Bugs caught + fixed

• 10 production bugs surfaced in upstream PR sweeps before maintainer review (script injection, dispatch spam, async-blocking, MCP envelope unwrap, scoped-handler leak, server-path leak, wrong-schema, etc).

Community

• GitHub Discussions enabled at https://github.com/looptech-ai/understand-quickly/discussions with 5 seed threads.
• Marketing drafts staged in docs/marketing/ (tweets, Bluesky, Reddit, dev.to, Show HN, promotion targets).

Breaking

None. schema_version: 1 unchanged. New fields are optional.

Links

• Repo: https://github.com/looptech-ai/understand-quickly
• Pages: https://looptech-ai.github.io/understand-quickly/
• Spec: docs/spec/code-graph-protocol.md
• CHANGELOG: CHANGELOG.md

pysdk v0.1.1

Python SDK patch release.

• Publish workflow now runs scripts/check-versions.mjs as a regression guard so a pysdk-vX.Y.Z tag can never publish a wheel whose pyproject.toml says a different version.
• No functional change to the understand_quickly Python package itself.

See CHANGELOG.md and docs/ops/release-process.md.

pysdk v0.1.0 — Python SDK initial release

First public release of understand-quickly on PyPI.

pip install understand-quickly

from understand_quickly import Registry
print(Registry().list(status="ok"))

What's included

• Registry (sync) and AsyncRegistry clients.
• 60-second TTL cache.
• CLI: python -m understand_quickly {list,get-graph,find,search,stats}.
• 54 tests, 0 deps beyond httpx (stdlib urllib for sync).
• Python 3.10+.

Methods

• list(status=, format=, tag=) — filter registry entries.
• get_graph(id) — fetch a graph by repo id.
• find_graph_for_repo(github_url) — given a GitHub URL, return matching entry.
• search(query, scope=) — concept search via stats.json.
• stats() — cross-graph aggregates.
• well_known() — discovery record.

Live registry

• https://looptech-ai.github.io/understand-quickly/
• https://looptech-ai.github.io/understand-quickly/registry.json

Source

python-sdk/

mcp v0.1.2

MCP server patch release.

• Publish-time version regression guard via scripts/check-versions.mjs (#15).
• No functional change to the MCP server itself.
• mcp/server.json version mirrored to 0.1.2 so the MCP Registry stays in sync with the npm package.

See CHANGELOG.md.

cli v0.1.2

CLI patch release.

• Fix Node 18/20 test glob expansion: tests/*.test.mjs is now quoted so the test runner expands the glob, not the shell. Previously npm test failed on Node 18/20 with the standard nvm install (worked on 22+).
• Inherit publish-time version regression guard via scripts/check-versions.mjs (#15).

See CHANGELOG.md.

cli v0.1.0 — npm CLI initial release

First public release of @understand-quickly/cli on npm.

npx @understand-quickly/cli add

What it does

1. Detects id from git remote get-url origin (SSH + HTTPS).
2. Scans common paths for an existing graph file.
3. Sniffs the format from JSON shape.
4. Computes the raw GitHub URL.
5. Prints the registry entry; offers to open prefilled issue or open PR via gh.

Flags

• --id owner/repo
• --format <name>@<int>
• --graph-url <url>
• --description "<text>"
• --tags a,b,c
• --print-entry / --open-issue / --open-pr

Source

cli/

v0.1.0 — first public release

First public release.

What's in the box

• Public registry index (registry.json) with JSON Schema validation.
• First-class graph formats: understand-anything@1, gitnexus@1, code-review-graph@1. Fallback: generic@1.
• Three ways to register your repo:
  • 🖱️ Wizard: https://looptech-ai.github.io/understand-quickly/add.html
  • 💻 CLI: npx @understand-quickly/cli add
  • ✍️ Manual PR
• Pages site with searchable entry browser and graph viewer.
• MCP server: list_repos, get_graph, search_concepts over stdio.
• Issue-to-PR bot.

Quickstart

curl -fsSL https://looptech-ai.github.io/understand-quickly/registry.json

See README for full quickstart and CONTRIBUTING.md to add your repo.