Skip to content Changelog
[0.3.0] - 2026-04-11
Changed
- Build / distribution — extension ships as a single bundled file for a smaller
.vsix and simpler deployment. Developer workflow: compile / build / vscode:prepublish for release; watch for fast rebuilds during extension development; bundle for a non-minified debug build.
- Removed legacy build pipeline — the old sequential project runner is gone.
Ctrl+M F runs Quality Hub only. For lint, typecheck, tests, and build, use custom checks in settings or built-in / CLI providers.
[0.2.9] - 2026-04-11
Changed
- License — switched from MIT to a proprietary license: free to install and use for personal or internal business use; redistribution, modification, forking, and commercial resale are not allowed. See the
LICENSE file in the package for full terms.
[0.2.8] - 2026-04-11
Added
- Documentation link in main menu — new “Open Documentation” item in the Tools submenu (
Ctrl+M M → Tools → Open Documentation) opens snakeflow.pages.dev in the browser.
- Email icon in docs header — contact email icon added to the documentation site navigation bar.
Fixed
- VS Code Marketplace metadata — updated homepage, support contact, categories (including Debuggers and Linters), and keywords for clearer discovery.
[0.2.7] - 2026-04-11
Changed
- Marketplace metadata — homepage now points to the documentation site; support contact updated; added Debuggers and Linters categories; expanded keywords.
[0.2.6] - 2026-04-11
Added
- Documentation site — launched snakeflow.pages.dev built with Astro Starlight; covers all features, quality checks, configuration reference, CLI tool installation, cloud provider setup, FAQ, and Changelog. Available in English and Ukrainian.
- Green snake icon — extension icon and documentation logo updated to green (
#22c55e) variant.
- Contact — support email added to README and documentation FAQ.
Fixed
- Package size — reduced from 83 MB to 325 KB by excluding
docs/ and .github/ from .vscodeignore.
- tsconfig — added
docs to exclude list to prevent Astro source files from being compiled by the root TypeScript compiler.
[0.2.5] - 2026-04-11
Fixed
- Cross-platform binary detection — CLI tools are checked for presence on
PATH before running, so missing tools return skip instead of a confusing error (notably on Windows with non-English locales). Applies to Hadolint, ShellCheck, golangci-lint, Trivy, and Bandit.
- README rewritten — now covers every feature, all 60+ quality checks, Docker Desktop installation, Docker image pull instructions, CLI tool installation for every supported platform, cloud provider setup, and full configuration reference.
[0.2.4] - 2026-04-11
Added
- Stryker — mutation testing provider for JS/TS projects; reports mutation score with killed/survived/no-coverage breakdown (
npm i -D @stryker-mutator/core)
- Bearer — SAST security scanning provider that detects sensitive data flows and vulnerabilities (
bearer scan)
- Component Inventory — pure Node.js check that scans exported React/Vue/Svelte components and hooks, groups them by UI pattern (Button, Modal, Input, etc.) and flags consolidation opportunities
- Any Coverage — reads generic
coverage-summary.json (Istanbul/NYC/Jest) and reports line/branch/function coverage percentages
- LCOV Coverage — parses
lcov.info files; works with any language that generates LCOV (Jest, Go, Python coverage, Ruby, etc.)
- JSDoc Coverage — estimates JSDoc documentation coverage for JS/TS exported functions and classes (pure Node.js)
- golangci-lint — runs
golangci-lint run --out-format json for Go projects; reports linter violations by severity
- GitHub Actions Audit — pure Node.js check that scans
.github/workflows/ YAML files for security issues: pinned actions, pull_request_target, actions/github-script, dangerous ${{ }} expressions
- Empty Tests — detects test files with no assertions (
it/test/expect/assert blocks), multi-language (JS/TS/Python/Go/Java/Rust)
- Heavy Imports — flags JS/TS files importing known large libraries (
lodash, moment, rxjs, antd, etc.) without tree-shaking-friendly subpath imports
- Coupling Metrics — measures afferent/efferent coupling and instability index per file; flags highly unstable or overly depended-upon modules
- Magic Numbers — detects hardcoded numeric literals that should be named constants, multi-language
- Parameter Count — flags functions/methods with too many parameters (default: warn ≥4, fail ≥7)
- Barrel Files — detects oversized
index.ts/js re-export barrels that hurt tree-shaking and build performance
- Cross-Layer Imports — detects forbidden import direction violations between architectural layers (e.g.
utils importing from components)
Fixed
- Bearer — JSON output was never parsed correctly;
bearer scan --format json outputs findings grouped by severity ({ critical, high, medium, low }) — was expecting a flat findings[] array, causing all scans to always report “No findings”
[0.2.3] - 2026-04-11
Added
- Git branch status bar item now auto-fetches from remote every 60 seconds and on window focus — ahead/behind counts stay in sync with the remote without manual refresh
Changed
- Git branch status bar item repositioned immediately to the right of VS Code’s built-in sync button for a more natural grouping
- Git branch status bar item no longer shows the branch name (VS Code already shows it) — displays icon + ahead/behind indicators only
- GitHub auth status bar item no longer shows the account name — displays icon only (account name visible in tooltip)
- Clicking a branch in the Git Branches sidebar now opens it on GitHub (compare view) instead of checking it out locally
- Removed “Delete Multiple Branches” and “Delete Gone Branches” buttons from the Git Branches panel title bar
Fixed
skill-template/SKILL.md was excluded from the packaged .vsix by .vscodeignore — caused “Error creating skill: ENOENT” when running the Create Skill command
[0.2.2] - 2026-04-08
Changed
- Changelog translated to English
[0.2.1] - 2026-04-08
Fixed
- Fixed Marketplace metadata links (
repository, bugs, homepage)
- Windows PowerShell commands now use
spawn with an array of arguments instead of exec with a string — fixes nested-quote issues when passing PowerShell scripts through cmd.exe
killByPort on Windows: rewritten with spawn, timeout, and double-resolve guard
getPortPids on Windows: rewritten with spawn — more reliable delivery of multi-line PS scripts
getProcessDescription on Windows: rewritten with spawnSync and argument array
lsof on macOS/Linux: now correctly handles ENOENT (lsof not installed) — resolves silently instead of throwing
getOrCreateTerminal: added env parameter for passing environment variables; when env is provided a fresh terminal is always created so the env takes effect
runInTerminal: forwards env to getOrCreateTerminal
Changed
- IDE detection (
idePaths.ts) now distinguishes three IDE types: Cursor, Antigravity, VS Code (previously Antigravity fell into the VS Code category without its own %APPDATA%\Antigravity path)
- Linux: user config path now respects
XDG_CONFIG_HOME (instead of a hardcoded ~/.config)
- Marketplace extension categories updated for better discoverability
[0.2.0] - 2026-04-08
Changed
- Renamed extension to SnakeFlow
- Servers are now a fully dynamic array — any number of servers, any language or runtime (Next.js, Vite, Django, Rails, Go, etc.)
- Package manager auto-detected from lockfile:
pnpm-lock.yaml, yarn.lock, bun.lockb, package-lock.json
- Database actions auto-detected from project dependencies (Prisma, Drizzle, TypeORM, Knex) — no manual config needed
- Status bar completely revamped: git branch with ahead/behind indicators, GitHub auth status, per-server live monitoring
Added
- Git Branches sidebar panel — view, checkout, and delete branches without leaving the IDE
- Pull Requests sidebar panel — view open PRs, send PR context to Cursor Chat for AI review
- GitHub Issues — search, filter by milestone / assignee / date, create branch from issue, send to Cursor Chat
- GitHub Actions — run workflows locally via
act
- Semgrep security scan with auto / security-audit / CI dry-run profiles
- Git commands — pull from origin, sync from upstream, push to origin
- Gemini AI title generation for GitHub Issues (optional, requires API key)
- Custom database actions — fully configurable via settings UI with variable substitution
- Custom container actions — configurable Docker Compose or any infra command
- Status bar: git branch indicator shows current branch name, commits ahead/behind, click to pull
- Status bar: GitHub auth indicator — shows signed-in account or prompts to sign in
devManager.git.defaultBranch setting — fallback when remote HEAD cannot be detected
devManager.git.protectedBranches setting — branches requiring extra confirmation before delete
devManager.prToChat.prompt — custom prompt prepended when sending PR to Cursor Chat
devManager.issueToChat.prompt — custom prompt prepended when sending issue to Cursor Chat
devManager.github.defaultMilestone — default milestone for new issues
devManager.gemini.apiKey / devManager.gemini.model — Gemini AI integration settings
devManager.database.actions — fully custom database action menu
Fixed
- Cross-platform terminal disposal errors (try-catch in sendCtrlC/disposeTerminal)
- Server status now uses combined check: port + terminal presence (avoids false positives from external processes)
[0.1.0] - 2026-02-14
Added
- Project auto-detection from workspace folder
- Server control: start/stop/restart dev servers
- Quality Hub: built-in + CLI checks, custom project scripts, live sidebar results
- Database / Prisma: Studio, generate, migrate, db push, seed, reset
- GitHub PR AI Feedback reports (requires
gh CLI)
- Docker Compose management
- Project tree view in sidebar
- Status bar with current project and server status
- Cross-platform support (Windows, macOS, Linux)