Skip to content

Commit a5d0a66

Browse files
xplusplusaiclaude
andcommitted
Release v1.3.2 - Code Obfuscation Security
- Heavily obfuscated JavaScript code (5.2MB from 388KB) - Proprietary MCP instructions now protected - Enterprise-grade obfuscation settings applied - Full functionality maintained Security enhancements: - Control flow flattening - Dead code injection - Base64 string encoding - Hexadecimal identifiers - Self-defending code 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
1 parent a41c4f1 commit a5d0a66

File tree

7 files changed

+961
-931
lines changed

7 files changed

+961
-931
lines changed

CHANGELOG.md

Lines changed: 35 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,41 @@ All notable changes to FO Semantic MCP Server will be documented in this file.
55
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
66
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
77

8+
## [1.3.2] - 2025-10-08
9+
10+
**Code Obfuscation - Enhanced Security**
11+
12+
### Changed
13+
- **Code Obfuscation**: JavaScript code now heavily obfuscated to protect proprietary instruction content
14+
- **Build Process**: New `build:obfuscated` script using javascript-obfuscator with aggressive settings
15+
- **Distribution Security**: Instruction content no longer readable as plain text in released code
16+
- **Bundle Optimization**: Single-file ESM bundle (388KB) obfuscated to 5.2MB with maximum protection
17+
18+
### Security Enhancements
19+
- Control flow flattening (threshold 0.75)
20+
- Dead code injection (threshold 0.4)
21+
- Base64 string array encoding
22+
- Hexadecimal identifier names
23+
- Self-defending code
24+
- String splitting and rotation
25+
- Object key transformation
26+
- Function wrapper chains
27+
28+
### Technical Changes
29+
- New build script: `scripts/build-obfuscated.js`
30+
- Updated package.json with `build:obfuscated` and `build:release` scripts
31+
- Output: `dist-obfuscated/server.js` (fully obfuscated, production-ready)
32+
- Maintains full functionality while protecting intellectual property
33+
34+
### Why This Matters
35+
**Problem Solved**: MCP instruction content was visible as plain text JavaScript on GitHub, exposing proprietary AI guidance and development methodologies.
36+
37+
**Solution**: Multi-stage build process that embeds instructions at build time, then heavily obfuscates the entire codebase. Result is fully functional but completely unreadable code.
38+
39+
**Security Level**: Instruction content now protected by enterprise-grade JavaScript obfuscation, making reverse engineering extremely difficult while maintaining runtime performance.
40+
41+
---
42+
843
## [1.3.1] - 2025-10-08
944

1045
**Embedded Instructions - Security Enhancement**

0 commit comments

Comments
 (0)