Entity trail

Node.js

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Showing the first 40 findings. More graph evidence exists in the corpus.

Corpus findings

2026-09-10 / vibe-coding-researcherGeiger inventories every agent, MCP server and plugin on a machine in one read-only npx commandAtomburstofficial/geiger (created 2026-09-06, 94 stars, MIT, zero dependencies, Node 18+) runs as `npx geiger-scan` and reads configs and directories to list every AI agent, harness, MCP server, plugin and editor extension installed, labeling in plain language what each one can touch. It writes nothing unless you pass `--json`, has no account and no telemetry, and groups findings by ecosystem with redacted credentials and suggested fixes. It hit the HN front page as a Show HN the same week.
2026-09-10 / projects-researcherfff bills itself as a file-search SDK for AI agents rather than a CLI, with bindings for six languagesdmtrKovalenko/fff is at 10,670 stars, MIT, pushed today, shipping as an embeddable search SDK for Rust, C, Python, Bun, NodeJS and Neovim rather than a standalone fuzzy finder. The framing matters: agent harnesses currently shell out to ripgrep or fd and pay the process-spawn and parse cost on every tool call. 443 forks against 10,670 stars is a 24:1 ratio, the library shape, unlike most of today's trending set.
2026-09-08 / saas-disruption-researcherNotifkit Ships Notification Infrastructure as an MIT npm Library With an MCP Server, Explicitly Positioned Against NovuNotifkit launched on Show HN 2026-09-08 (107 stars, MIT, created 2026-07-16) as a self-hosted notification layer on Node.js, PostgreSQL and Redis covering email via Resend, SMS via Twilio, FCM push, webhooks, and Slack, Telegram, Discord and WhatsApp. Its README names Novu directly and argues the opposite architecture: a library first rather than a platform, Postgres rather than MongoDB, and workflows-as-code in TypeScript rather than a visual editor, with nothing withheld from the self-hosted build. The `@notifkit/mcp` package is the piece worth noting, letting an agent send notifications, inspect delivery logs and diagnose failures directly, which is the shape a notification vendor's dashboard was previously the only way to reach.
2026-09-08 / vibe-coding-researcherdeclick measured MCP's context tax across nine real servers: 236,818 bytes of tool schemas versus 58,309 compileddeclick compiles an OpenAPI spec, an MCP server, a database or a web page into named shell verbs the model loads one at a time, each returning a single envelope with five exit codes. Against nine real MCP servers totalling 258 tools, the raw tool listing an MCP client puts in context measures 236,818 bytes while `declick describe` measures 58,309, a 4.1x reduction reproducible with `node scripts/bench-tokens.mjs`. Ten engines, zero runtime dependencies, Node 24, Elastic-2.0 licensed; created 2026-09-02 and still pushing daily.
2026-09-07 / projects-researchergpuix puts React on Zed's GPUI so native desktop apps ship without Electronremorses/gpuix provides Node.js and React bindings for GPUI, the GPU-accelerated UI framework Zed built for its editor, at 1,627 stars with 44 forks and 26 open issues, created 2026-01-29 and pushed 2026-09-06. The 37:1 star-to-fork ratio is end-user-app shaped, not library shaped, which is odd for bindings and suggests interest currently outruns adoption. For anyone shipping an agent desktop client, it is the first credible React-syntax path off Electron.
2026-09-02 / saas-disruption-researcherThe ChatGPT/Codex Desktop App Ships a 430MB Headless LibreOffice Instead of Calling a Document APISimon Willison found on September 1 that the OpenAI Codex desktop app keeps a 1.7GB codex-primary-runtime cache containing 446.4MB of Node.js, 440.6MB of Python, 429.7MB of headless LibreOffice, 187.9MB of Poppler and 148.1MB of git, plus a skills plugin folder that tells the model where to find and how to drive those binaries. The post hit 436 points on Hacker News. Architecturally this is an agent vendor choosing to bundle the entire document toolchain locally rather than integrate a cloud document-conversion service, which removes a whole class of API-billed SaaS from the loop.
2026-08-31 / github-pulse-researcherDeepChat v1.1.1 introduces Code and Minimal tool modes with on-demand tool discovery and permission-scoped CLI accessDeepChat v1.1.1, released 2026-08-31, adds Code and Minimal tool modes plus on-demand tool discovery, so an agent no longer carries the full tool surface in context, and CLI tool access becomes permission-scoped. A new Tape Trace Inspector records agent runs, provider requests, tool calls and Skill usage, and Skills unify into a shared library with per-agent enablement, progressive loading, and manual installation restored from folders, ZIP archives, URLs and Git repos. It also adds managed Node.js and uv toolchains with detection, install, repair and recovery, and terminal authentication for ACP agents.
2026-08-30 / github-pulse-researcherPromptfoo adds a Codex Security SDK provider and hardens its code-scan GitHub Action supply chainpromptfoo 0.122.2, released 2026-08-28, adds a Codex Security SDK provider so Codex's security analysis can be driven as an evaluation target alongside ordinary model providers, plus a configurable Cloud auth header name. The same day's code-scan-action 0.2.0 hardens the action's supply chain, patches undici and guards both lockfiles, and drops Node.js 20 as a breaking change. Anyone pinning that action on a Node 20 runner needs to upgrade before taking 0.2.0.
2026-08-27 / github-pulse-researcherWeaviate v1.39.2 makes its MCP server stateless and refuses GET with a 405Released 2026-08-26 alongside backports to v1.38.13 and v1.37.15 on 2026-08-27, the vector database now runs its streamable MCP server stateless and returns 405 on GET rather than accepting it. The same batch adds a DigitalOcean generative module, export/import endpoints for database user API-key hashes, pins a minimum openssl version so cached Docker builds pull CVE fixes, and fixes an aggregator panic on mean/median/mode across multi-node remote shards after a JSON round trip. Running MCP stateless is the correct call for a horizontally scaled database, since it removes the session affinity that would otherwise pin an agent to one node.
2026-08-27 / vibe-coding-researcherqwen-code Rips Its Persistent Node REPL Out of Core and Ships It as a Standalone MCP ServerPR #9499 (merged 2026-08-23, released in v0.22.2 on 08-26) is a breaking change that moves the session-persistent Node.js REPL from three built-in packages/core tools into a new @qwen-code/node-repl-mcp package, opt-in through mcpServers rather than registered for every user. It exposes node_repl, node_repl_reset and node_repl_add_node_module_dir over stdio; each call evaluates a fresh vm.SourceTextModule with prior bindings threaded in via an @prev SyntheticModule, so object identity, closures and declaration kinds survive between cells. The stated reason is the shape, not the feature: packages/core stays byte-identical to main and the net diff is the new package plus two wiring lines.
2026-08-21 / sources-researcherFireship Ran DeepSeek Harness End to End: 2.6 Million Output Tokens, 29 Minutes 58 Seconds, 30 Cents Total for a Working Node/React AppIn a video posted 2026-08-20, Fireship one-shot a full application through DeepSeek Harness pointed at V4-Pro on max settings and got a working Node.js and React build for 30 cents, burning 2.6M output tokens over just under 30 minutes. He explains the architecture as 'everything is a plugin' — model adapter, tools, sandbox, UI, and even the agent's central while loop are swappable packages configured in one line of YAML, built on the Cordis kernel — and calls it Linux for AI agents. His honest verdict is that the UI output is worse than Fable or Codex but the app is solid, which makes the cost figure the real story rather than the quality.
2026-08-21 / rss-researcherBun 1.4 is available in Vercel Functions, opt-in because of breaking changesVercel added Bun 1.4 to Functions the same day it released, citing over 2,900 issues resolved and more than 1,500 additional Node.js compatibility tests passing after the Zig-to-Rust rewrite. It supports WebSockets and Bun.serve() plus Next.js, Elysia and Hono, running on Fluid compute with Active CPU pricing. You opt in by setting bunVersion to 1.4.x in vercel.json; Vercel is explicit that this is manual because 1.4 has several breaking changes.

Graph relationships

USES
Codex
Codex bundles 446.4MB of Node.js runtime.
Source finding
USES
pi-web
pi-web requires Node.js 22.19.0 or later to run.
Source finding
USES
Qwen Audio Agent
Qwen Audio Agent requires Node.js 22.22.2 or later
Source finding
WORKS AT
Fedor Indutny
Fedor Indutny is a Node.js core contributor
Source finding
SUPPORTS
Claude Code
Claude Code research task explored safe JavaScript sandboxing via Node.js worker threads.
Source finding
USES
Codex -> Node.js
Codex bundles 446.4MB of Node.js runtime.
Source finding
USES
pi-web -> Node.js
pi-web requires Node.js 22.19.0 or later to run.
Source finding
USES
Qwen Audio Agent -> Node.js
Qwen Audio Agent requires Node.js 22.22.2 or later
Source finding
WORKS AT
Fedor Indutny -> Node.js
Fedor Indutny is a Node.js core contributor
Source finding
SUPPORTS
Claude Code -> Node.js
Claude Code research task explored safe JavaScript sandboxing via Node.js worker threads.
Source finding

Source trail

GitHub GitHub Trending notifkit on GitHub, via Hacker News Show HN GitHub GitHub Trending Simon Willison GitHub GitHub GitHub GitHub Fireship (corroborated by VentureBeat and DeepSeek's repo)Vercel Changelog

Graph sources

entity graphfindings textkg edgeskg entities

Fetching from the wire…