+3,033 stars this week (31.8k total), active issues/PRs through Aug 21, 2026. Stores memory/resources/skills as a virtual filesystem under `viking://` — agents `ls`/`tree`/`find` their context instead of querying a vector store. Three-tier loading (L0 ~100tok abstract → L1 ~2k overview → L2 full). Ships MCP client support, Ollama backend, REST API. AGPLv3 core. Backed by the VikingMem paper (VLDB 2026).
+2,404 stars this week (4k total, MIT, Rust). SQLite+FTS5 with git-versioned markdown as source of truth; vectors optional. Exposes memory over MCP to Claude Code, Codex, Cursor, Gemini CLI, Kiro, OpenCode and ~10 more. Explicit pitch is vendor handoff — switch agents without losing project knowledge.
+745 stars this week (5.4k total, Apache 2.0). Scans MCP servers *and* Agent Skills for 14 risk categories from source or remote URL, no running instance needed — tool poisoning, credential exfiltration, command injection. v4.5.0 (Jul 27, 2026) upgraded to 9 risk categories; backed by a Black Hat EU 2025 talk.
+2,755 stars this week (10.2k, MIT, Python). Polyglot graph backend — Neo4j, FalkorDB, Apache AGE, Oxigraph. W3C PROV-O provenance on every fact, SHACL validation, SPARQL/Datalog inference, causal ancestry back to root cause. 85 open PRs.
+1,395 stars this week (16.2k, MIT, Rust + Python bindings). 10M-doc corpus: 31GB float32 → 4GB. Benchmarks 3.4× faster search than FAISS IndexPQFastScan at 4-bit, 7.6–13.9× faster single-vector inserts, O(1) removal (~1µs vs FAISS's ~1s repack). LangChain/LlamaIndex integrations. No pgvector or HNSW benchmarks published.
Released Aug 20. HTTP layer moves `httpx` → `httpx2` (Pydantic's maintained fork); requires Python ≥3.10; removes legacy Text Completions, `temperature`/`top_p`/`top_k` on Messages, and tool-runner `compaction_control`. Async `.with_raw_response` now needs `await response.parse()`; `AnthropicBedrock` errors instead of defaulting to `us-east-1`. [Migration guide](https://github.com/anthropics/anthropic-sdk-python/blob/main/MIGRATION.md).
Aug 19. Files API and `/v1/skills` both out of beta — no more `files-api-2025-04-14` / `skills-2025-10-02` headers. Files gains `expires_in_seconds`, cursor pagination, `ids[]` filter. New `browser_toolset_20260801` drives a browser *your app* hosts, reading the accessibility tree, elements, forms and tabs. Computer use GA as `computer_toolset_20260801` with batch actions. Self-hosted-sandbox sessions can now mount memory stores at a `mount_path` and sync back.
Aug 19–20. `@cloudflare/vitest-pool-workers` → `@cloudflare/vitest-plugin` v1.0.0, with a codemod (`npx @cloudflare/codemods`). Wrangler 4.125.0 adds a raw-socket `connect` trigger for TCP in dev, `previews.containers` for containers in Worker previews, and workflow-instance deletion. Fixes `kv bulk put` corrupting binary values locally. Aug 22: Wrangler + Cloudflare MCP server support optional OAuth scopes.
Aug 20, first minor since 1.3 (May). ~97% of Node's own test suite on `node:http`/`fs`/`stream`; Next.js 16 and Playwright supported. 5× lower idle CPU, 13–48% less memory for HTTP servers. New built-ins: `Bun.cron()`, `Bun.WebView`, `Bun.Image`, `Bun.markdown`, `Bun.Terminal`. Global virtual store (7× faster warm installs), `bun audit fix`, `bun dedupe`. `bun test --parallel/--shard/--changed/--isolate`.
0.32.15 (Aug 19) — metadata caching cuts time-to-first-token ~50%; fixed chat/generate parser error handling. 0.33.0 pre-release (Aug 21) adds Claude Desktop app integration and broader MLX support.
[daringfireball.net, Aug 16](https://daringfireball.net/2026/08/anthropics_watermark_text_adulteration_in_claude_is_a_perversion_of_writing) — 822 pts / 729 comments on HN. Semantic steganography biases token choice toward a "green list" on *all* outputs over ~200 tokens, including API, and including text Claude merely proofreads or summarizes. No opt-out, no way to verify. Anthropic's own explainer went up Aug 14.
[simonwillison.net, Aug 16](https://simonwillison.net/2026/Aug/16/qwen-38-27b/) — 798 pts / 384 comments. Apache 2, runs at 15–30 tok/s on an M5 Max via LM Studio. Willison's headline complaint: it defaults to `xhigh` reasoning and spends minutes deliberating over "draw an SVG of a circle." Strong on bounding boxes and code gen.
[Task-based OAuth consent, Aug 20](https://blog.cloudflare.com/task-based-oauth-consent/) adds an `optional_scopes` array so users can decline individual scopes — servers must now check the *granted* scope set after code exchange, not assume. Separately, [Gateway now detects MCP traffic, Aug 14](https://blog.cloudflare.com/mcp-security-updates/) via the `MCP-Protocol-Version` header and can block "shadow MCP" connections that bypass Portals.
[OpenRouter announcement, Aug 19](https://openrouter.ai/blog/announcements/openrouter-is-joining-stripe/) — 954 pts / 495 comments, plus 485 pts on the [TechCrunch report](https://techcrunch.com/2026/08/16/stripe-will-reportedly-acquire-ai-gateway-startup-openrouter-for-7b/). 10T tokens/day, 400+ models. Bids reportedly opened near $10B and fell ~30% as model prices dropped. The HN debate centers on the neutrality paradox: a gateway sold on escaping vendor lock-in is now owned by the payments layer.