Skip to content

Changelog

Corrections, including our own mistakes, are also published at analytics.dugganusa.com/updates.

  • check-package answers review for versions below a security fix that shipped without an advisory, and says which version fixes it. First entries: the @x402/* npm packages below 2.23.0.
  • Docs moved to this site, with the full endpoint reference public.
  • Free tier is real-time. Free keys no longer get feed data delayed 48 hours.
  • STIX ids. About 4,300 feed objects had ids that were not valid STIX 2.1; fixed. Confidence is capped at 95; some values had been 100.
  • TAXII objects requests returned no indicators from 2026-02-17 to 2026-10-18 for every caller. Fixed. If you connected a TAXII client in that window and saw nothing, it should populate now.