Updates
Every release across my projects, newest first. Also available as an RSS feed.
DeepTrace installs as a plugin in Claude Code, Codex, and Cursor, and in any other skills-aware agent with one npx skills add command. Node profiling moves to Node's built-in profiler, which handles every case the bundled tracer missed.
Every tool was run against real projects and the failures were fixed, so traces and timings can be trusted. DeepTrace also installs as a Claude Code plugin.
First release of DeepTrace: a skill that makes an AI agent map a project, run it, and trace what actually executes before it reports bugs, with every finding tied to a real location.
v0.5.0 was run against the production NOWPayments API. In several places the live API sends different shapes than its own docs, which broke eight methods in v0.4.0. All eight are fixed, and the real responses are now test fixtures. Upgrading is recommended for everyone.
v0.4.0 adds a test suite that runs every service against the example responses in the official NOWPayments API docs, and checks webhook signatures against ones made by Node.js. That testing turned up several bugs, fixed here. The most important: genuine IPN callbacks containing &, <, or > failed signature checks, Invoices.Create could not decode its response, and retries could send a payout twice. Upgrading is recommended for everyone.
v0.3.0 realigns the SDK with the official NOWPayments Postman collection. It fixes a base-URL bug that broke every request, corrects the payout and subscription endpoints, and adds full coverage for conversions, custody (customer management), and fiat payouts. This release contains breaking changes.
v0.2.0 fills in most of the NOWPayments API: JWT auth, balance, full currency lists, payments from invoices, merchant estimates, detailed minimum amounts, and payout helpers (validate, list, minimum, fee, cancel, verify). It also adds optional retries and drops the Telegram helpers.
First release of NowPay Go, a Go SDK for the NOWPayments crypto payment API. It covers payments, invoices, currencies, estimates, payouts, and subscriptions, with webhook verification and Telegram helpers.
Output fixes found by running the published package against live sites: selected elements stay separate, icon-only links no longer clutter markdown, and link lists carry the most useful anchor text.
Two small follow-ups found while checking v0.2.1 on Windows: a misleading warning from js-view install, and a project MCP server that Claude Code offered when opening the repository itself.
Fixes found by testing every command and option of v0.2.0: js-view install works, proxies keep their credentials, and the Cursor install button works from GitHub and npm.
JS-View is now an npm package, @muxover/js-view, with a CLI and an MCP server, and installs as a plugin in Claude Code and Codex or with one click in Cursor. Renders report bot checks, login walls, and empty pages instead of returning them as content.
First release. js-view loads a page in headless Chromium, lets its JavaScript run, and returns the content that actually rendered, so agents can read SPAs and infinite-scroll feeds.
v2.8.0 makes the mock system capable enough to simulate real API behavior: multi-step response sequences, request body matching, per-rule latency, and file-based import/export for sharing mock libraries across a team.
v2.7.0 makes snare safe to run on shared networks and remote machines: basic auth, IP allowlisting, HTTPS dashboard, SOCKS5 inbound, and a QR code in the CA modal so you never have to type a LAN URL on mobile again.
v2.6.0 adds a SQLite persistence backend, a built-in traffic stats command, and list pagination — making snare usable on long-running proxies with thousands of captures without losing data across restarts.
v2.5.0 makes HTTPS traffic fully transparent (TLS metadata in every capture), adds a security scanner, gives you precise control over what gets captured, and upgrades the web dashboard with a waterfall timeline and a live scope panel.
v0.8.0 adds a Go emitter to the experimental decompile pipeline. goripper decompile --lang go lifts user-defined functions and emits Go-shaped source per package, with recognized runtime.* calls mapped to Go idioms. Output is structural — a reading aid, not faithful or compilable source; register/stack math and unresolved logic are approximated or elided. Control flow structuring and readable pseudocode are planned for v0.9.0+. The existing --lang c output is unchanged.
v2.4.0 makes it easy to share debugging context across machines, adds a smarter JSON diff view, and lets you filter by response time across all commands.
v2.3.0 adds a complete testing and CI layer on top of the existing proxy. You can now write YAML test suites, record golden baselines, check regressions between deploys, and fuzz captured requests — all from the same binary, all with captures visible in the dashboard.
v2.2.0 adds a JavaScript hook system. Drop a .js file on the command line and snare calls its functions for every request — before forwarding, after the response, and after the capture is saved. No restart needed; the file is reloaded from disk on every request.
A correctness and hardening release. It fixes responses and request bodies that could stall a connection, makes credential checks timing-safe, trims syscalls on the relay path, and adds opt-in controls for DNS and destination filtering. The configuration format is backward compatible.
v0.7.0 ships the decompilation pipeline as an experimental foundation. goripper decompile lifts user-defined functions through a three-address IR, SSA renaming, variable recovery, and C type propagation, emitting .c skeletons per package. Output is structural — not yet readable source. String constant resolution, control flow reconstruction (if/else/while), and Go runtime pattern recognition are planned for v0.8.0.
v2.1.0 adds first-class support for four protocol types that were previously opaque: SSE streams are parsed frame by frame, GraphQL operations are identified and indexed, gRPC frames can be decoded with a .proto file, and reverse proxy mode now serves HTTP/3 over QUIC alongside the existing TCP listener.
v0.6.5 is a bug-fix release with no new features. It corrects eleven issues found during deep quality review after v0.6.0 shipped — covering function classification accuracy, trace output correctness, scan-dir behavior on Windows, and versioned script exports.
GoRipper can now trace a binary as it runs, capturing function calls, syscalls, network connections, and file access as a structured JSONL event stream. Feeding that stream back into analyze annotates every function with actual call counts and hot-path flags — bridging static and dynamic analysis in one tool.
GoRipper can now analyze binaries as a family, not in isolation. Similarity hashing makes function-level comparison fast and architecture-neutral. scan-dir scales that to a whole directory in parallel. The module graph tells you exactly what third-party code is in the binary and whether any version carries a known CVE.
Five targeted improvements: HTTP keep-alive on the client side, pooled copy buffers, auth reload on SIGHUP, IP literal short-circuit in DNS, and an atomic connection counter. No changes to the configuration format.
Three targeted improvements: inactivity-based idle timeout, outbound dial retry with source IP rotation, and live config reload via SIGHUP. No changes to the hot path or existing configuration format.
First release of Vanta — a high-throughput HTTP and SOCKS5 proxy that binds each outbound connection to a randomly generated IP from owned subnets. Single port, zero-copy relay, one listener goroutine per CPU core via SO_REUSEPORT.
v2.0.0 is the "complete tool" release: every feature is now reachable from all three modes — CLI, TUI, and browser dashboard. This release adds a full browser UI, a rebuilt TUI with four management tabs, shadow proxy, gRPC frame capture, session diff, and a config file.
Output is now directly actionable. Taint analysis traces untrusted input to dangerous sinks through the call graph. YARA rules are generated automatically from high-signal strings. A rule-based threat classifier gives a verdict without reading the full report. IDA and Ghidra scripts flow recovered function names and behavior tags into the RE tools analysts already use.
Five new analysis capabilities and a self-contained HTML report format. Section entropy reveals packed and encrypted regions at a glance. Embedded asset paths are detected via callgraph-guided string matching. Interesting immediates (ports, magic numbers, crypto key sizes) are extracted per function. The new --html flag produces a dark-theme, filterable report with an inline SVG entropy bar chart — no external dependencies, works offline.
v1.9.0 adds chaos engineering and artificial latency to the proxy, a VCR-style record/playback system for offline development, OpenAPI spec generation from captured traffic, Postman collection export, a curl command formatter, automatic browser launch, and mobile CA install via ADB and Safari.
v1.8.0 adds reverse proxy mode, body rewriting, URL ignoring, remote mapping, memory-only mode, body size capping, a full-text body search command, in-editor replay, selective capture deletion, per-command filter flags, automatic CA trust store installation, colorised output, a protocol column in list/watch, and WebSocket frame display in the TUI.
Snare can record WebSocket traffic end-to-end wherever the proxy terminates or originates the upgrade: MITM over HTTP/1.1 (101), MITM over HTTP/2 extended CONNECT (RFC 8441, 200 on the stream), and cleartext http:// / https:// proxy requests (serveHTTP) using dial + hijack so the origin socket stays open for the relay.
Two features for observability and traffic control. The connection inspector gives you a live snapshot of every pooled connection — latency, health score, in-flight count, and byte totals — without any external tooling. The token-bucket rate limiter lets you cap outgoing RPS at the client level: callers block until a token is available, and context cancellation always unblocks immediately.
Adds an interactive terminal UI for browsing captures, plus three scripting/automation primitives that make Snare useful in CI pipelines and shell workflows.
Adds active request interception. Run serve --intercept to pause matching requests mid-flight; then forward, edit, or drop them from a second terminal using the snare intercept commands.
Adds a full mock/stub system. Define rules that intercept matching requests and return fixed responses — without hitting the real server. Rules persist to disk and load automatically on serve.
Adds upstream proxy chaining, outbound rewrite/mutation rules on serve, URL-match batch replay, and HAR import. This release also updates key networking/compression dependencies.
Adds live watching, richer listing (latency, time range, body search), capture comparison, and full-store scans when filters need every capture on disk.
Architecture milestone. GoRipper now supports ARM64 and Mach-O in addition to x86_64 PE and ELF. A new arch-neutral Disassembler interface replaces direct x86asm usage throughout the call graph, CFG builder, and string cross-referencer — all three stages now work correctly on both architectures. Type recovery is deeper: struct fields are fully extracted, and a new itab pass recovers which concrete types implement which interfaces.
Two features aimed at real-world workload patterns. The Batch API lets you fire many requests in parallel with a single call and get results back in order — no manual goroutine management. Adaptive retry replaces the one-size-fits-all exponential backoff: 429 responses now respect the server's Retry-After hint, connection errors retry immediately without any sleep, and 5xx responses still back off exponentially as before.
First stable release. Promotes the project from nine pre-release iterations to a production-ready tool with verified PE and ELF support, a complete analysis pipeline, cross-platform release binaries, and full documentation.
Three targeted improvements to how connections are established and how pipelining is managed. TCP Fast Open and SO_REUSEPORT reduce connection setup cost on Linux. Pipeline depth now adjusts automatically per connection based on real latency — fast servers get deeper pipelines, slow servers get shallower ones. And failed DNS lookups are now cached briefly so a bad hostname doesn't cause a DNS hammer on every request.
Three internal upgrades that make bursthttp faster and smarter under load. The connection pool now picks the fastest connection instead of just the first available. DNS no longer blocks the request path — lookups are deduplicated and results are refreshed in the background before they expire. And when all connections are busy, requests wait in a proper queue instead of spinning in a retry loop.
Patch release that fixes proxy behavior, error handling, chunked response parsing, and connection pool timing. Proxy timeouts no longer double on failure; slow or dead proxies no longer cause long cascading retries. Error classification (IsTimeout, IsRetryable) and CONNECT rejection messages are improved.
First public release of bursthttp — a high-performance HTTP/1.1 client for Go with pipelining, per-host connection pooling, and zero external dependencies.
Adds pre-encoded request headers, a lock-free connection pool path, and zero-copy header handling. You can cache the request header block and send many requests with the same headers without re-encoding; the connection pool uses lock-free structures on the get path; request and response headers support zero-copy where applicable.
First release of Snare: an HTTP/HTTPS proxy CLI that intercepts, captures, and replays traffic. Set HTTP_PROXY/HTTPS_PROXY to the proxy and use the CLI to list, show, replay, save, and export captures (JSON or HAR).