Docs

CHANGELOG

Every release. Every change.

Honest log of what shipped, what broke, and what is next. New entries on top.

  1. v1.0.0

    Jun 2, 2026

    live

    Out of beta. Nipcode Sense goes live.

    First stable release. The in-house ranking model gets a name, a conversational endpoint, and a chat UI in the account dashboard.

    • Nipcode Sense. Our in-house ranking and decision model. Judges trust signals, surfaces risk, answers conversationally. Wrapped around the search_packages tool so every claim is grounded in fresh registry data.
    • New POST /api/chat endpoint. Streaming Server-Sent Events. Accepts {messages:[...]} with full conversation history.
    • /account redesigned as a chat. Bubbles, streaming tokens, persistent session history. Hero with example prompts on empty state.
    • Beta tag removed across the site, docs and discovery files.
    • Rate limit: 60 req/min for read endpoints, 30 req/min for /api/chat.
    • Status page in README and llms.txt updated to live.

  2. v0.1.1

    Jun 2, 2026

    shipped

    Project namespaces for API keys.

    Group keys by project (production, ci, demo). Up to 25 active keys per account.

    • New GET /api/projects endpoint with per-namespace key counts and last-used timestamps.
    • /api/keys accepts project on POST, filters on GET.
    • /account/keys UI: tabs across projects, new-project modal, copy + revoke flow.
    • Sidebar shows shortened wallet address for Phantom sign-in users.
    • OAuth: Google, GitHub, Phantom (Solana SIWS) buttons live on the login card.
    • Rich decision render: stat cards, 5-step flow strip, Copy decision JSON.

  3. v0.1.0

    Jun 1, 2026

    beta

    Public beta.

    First public release. Hosted API plus account dashboard.

    • Landing page at nipcode.xyz.
    • Static docs at /docs (9 pages: overview, quickstart, API reference, agents, examples, sources, trust, architecture, security).
    • Account dashboard at /account with sidebar layout (search + API keys).
    • /api/search: fan-out across npm, PyPI, crates.io, GitHub.
    • /api/decision: LLM-ranked recommendation with structured trust blocks.
    • /api/inspect: single-record refresh with full trust factor breakdown.
    • /api/install-plan: install command with explicit approval boundary.
    • /api/auth + /api/auth/verify + /api/sign-out: Supabase email OTP flow.
    • Supabase schema: accounts, api_keys, waitlist_emails, api_usage. RLS on every table.
    • Trigger auto-mints primary API key on signup.
    • Rate limit: 60 requests per minute per key.
    • Sources added in same release window: Hugging Face Models, Docker Hub, MCP servers.
    • llms.txt + .well-known/nipcode.json for AI agent discovery.
    • MIT license, public repo, README, this changelog.

  4. v1.1

    planned

    next

    More sources, deeper Sense.

    Broader registry coverage, a richer inspect endpoint, and Nipcode Sense gets more tools.

    • JSR source resolver.
    • Go modules source resolver.
    • Maven Central, NuGet.
    • Nipcode Sense: new tools for inspect and install_plan (not just search).
    • Per-key usage stats panel on /account/keys.
    • /api/archive/prepare preview endpoint.
    • Custom email template for OTP via Resend (replaces Supabase built-in SMTP).

  5. v2.0+

    later

    later

    Local CLI and sandbox.

    The actual local-execution surface that the hosted API does not provide.

    • nipcode CLI: deep-scan, sandbox-audit, sandbox-runtime.
    • Remote MCP endpoint (read-only).
    • Local MCP server bundled with CLI.
    • RubyGems, Packagist, Hugging Face Datasets, Homebrew.
    • Distributed rate limits with Supabase-backed shared buckets.

Source of truth: CHANGELOG.md on GitHub.