docs+tests: market-pulse 2026-05-29 follow-up#39
Merged
Conversation
Acted on the two ProfileKit-local items from /heznpc-market-pulse:
Major — Related projects comparison in README
- Added a "Related projects" section comparing ProfileKit against
anuraghazra/github-readme-stats (dominant, ~79.5k★, last commit
2026-01-18) and lowlighter/metrics (~16.7k★, push 2026-05-22, the
active 300+-option direct competitor). Differences framed as
stylistic, not better/worse — composition unit, update model,
configuration, runtime deps, card set, MCP integration. Includes
"when ProfileKit fits well" / "when alternatives fit better" so the
comparison stays honest.
Minor — response-header regression test
- New tests/endpoint-headers.test.js covers:
· /api/divider — Content-Type: image/svg+xml + Cache-Control max-age
(Camo cache depends on both)
· /api/health — application/json + Cache-Control: no-store (probes
must observe current pool state, not a snapshot)
· /api/catalog — application/json + max-age (MCP discovery hits this;
no caching = hammered function)
Also cross-checks the README/catalog contract that theme_url appears
in hero.common_params — closes the loop with the catalog test added
in #38.
Out of scope (verified clean, no fix needed):
- vercel.json + README scan for "edge runtime" mentions — none found.
Vercel Edge Functions deprecation (2026-04-08) does not affect this
repo because the functions are already Node serverless.
Out of scope (separately, different repo):
- MCP wrapper plugin-directory submission + "third-party, not Anthropic
Verified" disclaimer — lives in MCP/profilekit-mcp, not here.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Acted on the two ProfileKit-local items from /heznpc-market-pulse:
Major — Related projects comparison in README
anuraghazra/github-readme-stats (dominant, ~79.5k★, last commit
2026-01-18) and lowlighter/metrics (~16.7k★, push 2026-05-22, the
active 300+-option direct competitor). Differences framed as
stylistic, not better/worse — composition unit, update model,
configuration, runtime deps, card set, MCP integration. Includes
"when ProfileKit fits well" / "when alternatives fit better" so the
comparison stays honest.
Minor — response-header regression test
· /api/divider — Content-Type: image/svg+xml + Cache-Control max-age
(Camo cache depends on both)
· /api/health — application/json + Cache-Control: no-store (probes
must observe current pool state, not a snapshot)
· /api/catalog — application/json + max-age (MCP discovery hits this;
no caching = hammered function)
Also cross-checks the README/catalog contract that theme_url appears
in hero.common_params — closes the loop with the catalog test added
in chore: 2nd-pass audit catches — SSRF guard tests, theme_url scope, defense-in-depth #38.
Out of scope (verified clean, no fix needed):
Vercel Edge Functions deprecation (2026-04-08) does not affect this
repo because the functions are already Node serverless.
Out of scope (separately, different repo):
Verified" disclaimer — lives in MCP/profilekit-mcp, not here.