Highlights
ECC Tools Pro is live. The GitHub App now has Stripe billing with a Pro tier ($19/seat/month) for private repo analysis, 50 analyses/month, and AgentShield-backed scanning. Free tier remains at 10 analyses/month for public repos. Install at github.com/apps/ecc-tools, upgrade at ecc.tools/pricing.
Selective install is here. Install only what you need with --with and --without flags. ecc install --profile developer --with lang:typescript --with agent:security-reviewer --without skill:continuous-learning. Agent and skill component families are now in the install manifest.
12 language ecosystems. C#, Rust, Java, Kotlin, C++, Go, Python, TypeScript, Perl, PyTorch, Nuxt 4, and Flutter now have dedicated rules, agents, or skills.
AgentShield v1.4.0 ships alongside. False positive scanning fixed. CVE database with 25+ known MCP vulnerabilities. Supply chain verification. Runtime monitoring. Watch mode. PR security gate. Org-wide policy enforcement.
ecc-v1.9.0-release-demo.mp4
What's New
Agents (28 total, +9 new)
typescript-reviewer— TypeScript/JavaScript code reviewpytorch-build-resolver— PyTorch build error resolutionjava-build-resolver— Maven/Gradle build resolutionjava-reviewer— Java code reviewrust-reviewer— Rust code reviewflutter-reviewer— Flutter/Dart code reviewharness-optimizer— Cross-harness optimizationkotlin-build-resolver— Kotlin build resolutionkotlin-reviewer— Kotlin code review
Skills (116 total, +15 new)
pytorch-patterns— PyTorch best practicesnuxt4-patterns— Nuxt 4 frontend patternscodebase-onboarding— Onboarding new contributorsarchitecture-decision-records— ADR workflowagent-eval— Head-to-head coding agent comparisondocumentation-lookup— Doc retrieval patternsbun-runtime— Bun runtime patternsnextjs-turbopack— Next.js Turbopack patterns- Plus 7 more language-specific skills
Rules (6 new language packs)
- C# (coding-style, patterns, security, testing, hooks)
- Rust, Java, C++, Perl language rules
- Flutter/Dart rules
Infrastructure
- Selective install with
--with/--withoutCLI flags - Agent description compression with lazy loading
- Skill inspection logic for recurring failure pattern detection
- Governance event capture hooks
- MCP health-check hook with auto-reconnect
- SQLite state store for session/skill/decision tracking
- Session adapters for canonical snapshots
- Codex sync merges AGENTS.md instead of replacing
Bug Fixes
- Windows CI fully green (all 38 matrix jobs passing)
- SessionStart ANSI escape code sanitization
- Observer memory explosion with throttling
- Flaky observer bash test on Windows skipped
- Catalog count validation fixed
- Plugin root auto-detection fallback
ECC Tools App
- Stripe billing live (Pro $19/seat, Enterprise contact)
- GitHub OAuth checkout flow
- Analyzer quality improvements (7 greptile findings fixed)
- Duplicate PR prevention with idempotency
- Auto-analysis skip list for managed repos
- Push cooldown increased to 7 days
AgentShield (v1.4.0)
- False positive fix: deny rules and block hooks no longer flagged as threats
- CVE database with 25+ known MCP vulnerabilities
- MCP tool description poisoning detection (5 new rules)
- Continuous scanning with config drift detection (--watch mode)
- Runtime monitoring daemon for tool calls
- Supply chain verification for MCP npm packages
- PR security gate with baseline comparison
- Organization-wide security policy enforcement
- CLAUDE.md filesystem permission check
- 1,609 tests passing
Stats
- 219 commits since v1.8.0
- 30+ contributors
- 88K+ GitHub stars
- 1,540+ tests passing across all platforms
Install / Upgrade
npx claudepluginhub affaan-m/everything-claude-code --plugin everything-claude-codeOr install manually in Claude Code.