Every Monday · 09:00 IST

The releases that matter, first.

One calm digest of every release across the open-source libraries your product runs on. Security fixes and breaking changes lead, with the evidence quoted. Everything else fits in a line.

Read the latest digest Manage tracked repositories

Latest digest · 2026-W43

Week of 19 Oct 2026

3

Act now

2

Review

14

FYI

Top item · Act now

vercel/next.js v16.4.1

Security release addressing critical RCE vulnerabilities in use cache and Image Optimization, plus a high DoS vulnerability in App Router.

Read this week's digest

How it works

Releases in. Evidence checked. Five minutes out.

  1. 01

    Releases only

    GitHub Releases from the past 7 days, plus tags for repos that never publish releases. No issues, pull requests, comments or commits.

  2. 02

    Evidence before urgency

    A security or breaking flag needs a quoted line from the notes, a GitHub advisory, or a major version bump. The AI cannot raise one alone.

  3. 03

    Summarized, then ordered

    Gemini Flash writes one line per release; rules sort Act now, Review and FYI by impact and group the rest by product area.

Adoption Check

Before you adopt it

14 open-source candidates, re-checked every Monday from GitHub, OpenSSF Scorecard, OSV and package registries. Fixed rules set every score and verdict, and each one lists its reasons.

Open the watchlist

  • 5

    Healthy

  • 6

    Watch

  • 3

    Risky

History

Recent weeks

Full archive

Tracking 26 repositories across

  • payments5
  • auth5
  • banking3
  • platform4
  • data4
  • tooling2
  • evaluation3