What changed in each release. To update the Claude Code plugin, run claude plugin marketplace update keep-me-secure-mcp, then claude plugin update keep-me-secure@keep-me-secure-mcp.
1.7.0
Reads Dockerfiles: base image, end-of-life OS versions, floating tags, running as root, and OS packages installed with apk or apt
Warns about flaws in OS packages, starting with the OpenSSH password bypass on Alpine, which it reports as unverified because a Dockerfile shows no exact version
Adds the suggest_dependabot tool, with a 2 day cooldown that doesn't delay security updates
Each finding now explains what it means for your computer and for production
1.6.0
Shows when your Node.js or PHP version stops getting support, and whether it's an LTS line
Checks whether npm, pnpm, Yarn and Composer wait before installing new releases, and how to let an urgent fix through
Flags direct dependencies that are deprecated, abandoned, or have had no release for two years
Adds this changelog
1.5.0
Checks declared Node.js and PHP versions against known flaws, with exploited status taken live from CISA
Adds the check_runtime tool
Reports ranges and unreadable versions as unverified, never as clear
Adds the privacy statement and terms
1.4.0
Warns about security incidents at platforms a project uses, such as Railway and Vercel
Adds the check_platform tool and a public incidents page
1.3.2
Security release, after independent audits.
Malicious releases stay flagged when an ordinary advisory shares their alias
Text from a repo can no longer reach the agent through the session-start message
Advisory ids and versions must match strict patterns, and cache keys can't choose a file path
Anything that can't be read gives unknown, never no
Replaces the YAML library with a line-based pnpm reader