GraphifyProduct update
Graphify · v0.9.70
Graphify v0.9.70 fixes GHSA-pcc4-rvhr-2pr8, where indexing an untrusted repo let a .F/.F90 source pull any host file in through #include, landing its contents in graph.json, GRAPH_REPORT.md and the LLM context. Two more security fixes close a shell injection in the Aider/Devin --watch snippet and extend Terraform secret redaction to values in name/value pair lists. JSX component usage now produces calls edges, so React component graphs capture what renders what.
Every #include directive is now stripped before preprocessing and the source is fed to cpp on stdin; macro expansion is preserved (GHSA-pcc4-rvhr-2pr8, CWE-22/73/200).
Saved . A shortened excerpt from GitHub Releases; the original publisher retains authorship.