# Traceary

> An archive of release notes for 61 developer, infrastructure and AI products. 4,704 versions, the oldest from 2016, each with its own page and its own permanent address.

Notes are reproduced as their publishers wrote them. Nothing is summarised, reworded or translated, and every page links to the original. 55 products are read through the GitHub Releases API and the remaining 6 through the public RSS or Atom feed their vendor publishes. 4 of them write no notes in the release and name their CHANGELOG instead, so the section belonging to the version is read out of that file, in the same repository, still in the publisher's own words. No page is scraped and no browser is driven.

## What the archive can answer that its sources cannot

A publisher writes one release at a time and documents the version you are on. The run between two versions exists nowhere as a single list, and that gap is what this site fills.

- Where a version sits now: what superseded it, how many days later, how far its line has moved on, and whether its major is still being maintained alongside a newer one.
- Which release closed a given security advisory, matched from the advisory's own patched version field. 619 of 1222 advisories match a release held here.
- Everything that arrived in a major version, from its first release onwards. 32 major lines qualify, and only those whose first release the archive holds, since a partial major presented as a whole would be worse than no page.
- How often a product asks you to change your code. 17 products have enough tagged releases for that to be a shape rather than an anecdote.

## Machine readable

- https://traceary.com/catalog.json: every product, its source, its counts and its newest release.
- https://traceary.com/[product]/releases.json: every release held for one product, without the notes bodies.
- https://traceary.com/status.json: whether collection is running, measured rather than configured, and every outage on record.
- https://traceary.com/feed.xml and https://traceary.com/[product]/feed.xml: RSS.
- https://traceary.com/sitemap.xml: every page.

## Pages

- https://traceary.com/catalog: all 61 products.
- https://traceary.com/security: the newest 300 of 1222 published advisories across 42 products, with the release that carries each fix.
- https://traceary.com/[product]/advisories: one product's full advisory register, which is where all 1222 of them are reachable.
- https://traceary.com/status: whether the collection job is running, and what it has missed.
- https://traceary.com/about: how the data is collected, and what is missing from it.
- https://traceary.com/terms: what this site claims to be, and what it does not.

## What the archive does not claim

- It is not authoritative on security. Advisories here are copies of what publishers published. The publisher is the authoritative source, and an advisory absent from these pages is not evidence that none exists.
- Severity ratings belong to the publisher who assigned them. Nothing here is our judgement.
- The breaking label is matched from words in the publisher's own notes. A release that changed an API without using the word does not carry it.
- Until 28 August 2026 the collector kept only the newest sixty releases per product, so a line held here may begin partway through its history. Every computed claim on the site looks forward from a release rather than back to its line's origin, because forward is exact and backward is not.
- Collection can fail, and https://traceary.com/status records when it has.