safishamsi/graphify v0.3.20

on GitHub

What's new

• Fix: XSS in interactive HTML graph — node labels, file types, community names, source files, and edge relations now HTML-escaped before innerHTML injection; neighbor link onclick uses JSON.stringify instead of raw string interpolation
• Add: OpenCode tool.execute.before plugin — graphify opencode install now writes .opencode/plugins/graphify.js and registers it in opencode.json, firing the graph reminder before bash calls (equivalent to Claude Code's PreToolUse hook) (#71)
• Fix: AST call edges now EXTRACTED/1.0 instead of INFERRED/0.8 — tree-sitter call resolution is deterministic, not probabilistic (#127)
• Fix: tree-sitter>=0.23.0 pinned and _check_tree_sitter_version() guard added — stale environments now get a clear error with upgrade instructions instead of a cryptic TypeError (#89)

Install / upgrade

pip install --upgrade graphifyy

Full changelog: CHANGELOG.md