DepTime
io.github.cschmertzPublished by GitHub account cschmertzv0.1.8Updated Nov 7, 2026
What changed in a Python library, in which release, and what replaces it. Answered locally.
Overview
Local MCP server that tells a coding assistant what changed in a Python library, in which release, and what replaces it.
- What you can do
- Explain a traceback: identify the package, symbol and breaking release, with replacements and a pin to restore
- Look up a symbol's history across releases before trusting a remembered API
- Pre-flight check symbols and keyword arguments against a specific version
- Diff two versions, or everything since a date, optionally limited to symbols you use
- Report which packages are indexed, with evidence and confidence on every answer
- When to use it
- Useful when an assistant hits ImportError, AttributeError or an unexpected keyword argument in a fast-moving Python library, or when planning an upgrade and asking what changed since a model's training cutoff.
- Requirements
- Runs locally over stdio via uvx (requires uv). On first launch it downloads a prebuilt index file from GitHub Releases and checks for updates at most once a day; DEPTIME_OFFLINE=1 disables all network access. DEPTIME_HOME sets where the index is stored (default ~/.cache/deptime). No account or API key.
Installation
In SourceWeft
- Open DepTime in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
[DepTime]
An API time machine for Python libraries, built for coding agents.
When an agent hits ImportError, AttributeError or "unexpected keyword argument" in a fast-moving library, one call to DepTime says what changed, in which release, and what to use instead. Answers are computed from static diffs of every indexed release, not from docs or model memory.
Free, open source (MIT), and local: your code and errors never leave your machine.
Every night, GitHub Actions reads each new release's public API with griffe, which parses the source without running it, diffs it against the previous release, and publishes the result as one file, index.sqlite.xz, on this repo's Releases. On your machine, deptime mcp checks that file's sha256 and schema before swapping it in, then answers every question locally in milliseconds. The full design is in docs/04-architecture.md, and the decisions are in docs/adr/.
That's the real explain_error answer from the published index, trimmed. The full answer also quotes the deprecation message DepTime found in httpx's own source, and adds a one-sentence explanation for your agent to pass on.
Status: alpha. The prebuilt index is rebuilt twice a day. Known gaps are tracked in BACKLOG.md.
How well it works
Each check's right answers were written down before DepTime first ran on it (bench/). Judge DepTime by the first run: the fixes since then were designed from its misses, so the later numbers are flattering.
Across all 237 real tracebacks in the benchmark, including the ones fixes were designed from, DepTime names the right package, name and release for 97.9%, and a right replacement is among its first three for 66.7%. CI re-scores them and both holdouts on every code change and every published index, and fails on a drop of more than 2 points (or a false-positive rate up by more than 1).
Install
Requires uv.
On first launch DepTime downloads its prebuilt index (one file from this repo's GitHub Releases) in the background, then checks for a newer one at most once a day. Set DEPTIME_OFFLINE=1 to never touch the network. Each index carries a signed record of the CI run that built it; deptime index pull --verify checks it (SECURITY.md).
Claude Code users can also install the plugin in integrations/claude-code with /plugin marketplace add cschmertz/deptime, then /plugin install deptime@deptime. It adds a skill and a local hook that suggests DepTime when a Python version-change error appears in a command's output.
First launch timing out? uvx installs DepTime the first time a client starts it. On macOS with an x86_64 uv (an Intel Mac, or Intel Homebrew on Apple silicon), one dependency, cryptography, has no prebuilt wheel and is compiled, which can take longer than a client waits for a server to start. Run uvx deptime --help once beforehand.
Client compatibility
Checked 2026-11-05 with deptime 0.1.4 (details):
Tools
Every answer carries evidence and a confidence level. If a package isn't covered, DepTime says so instead of guessing. The contracts are in docs/03-product-spec.md.
CLI
Hosting (optional)
Local mode covers coding agents. For web clients that only accept a URL, run deptime serve (MCP at /mcp, JSON at /v1/*) on any container host. The repo includes a Dockerfile and fly.toml, and the server applies anonymous rate limits. See docs/05-self-hosting.md.
Prior art and credits
- griffe does the static analysis.
- since-cutoff diffs your pinned dependencies against a model's training cutoff, locally and on demand. DepTime differs by shipping a prebuilt cross-version index and starting from a traceback.
- Context7 and Ref serve version-specific docs. DepTime answers symbol-level "when and what replaced it" questions.
Contributing
The most useful contributions are wrong-answer reports, which become benchmark cases. See CONTRIBUTING.md. Development setup:
Docs
Product spec · Architecture · Self-hosting · Risks & spikes · Privacy & security · Changelog
License
Source: README.md at commit 03b52ce
Tools
0Version history
5- v0.1.8LatestNov 7, 2026
- v0.1.6Nov 6, 2026
- v0.1.5Nov 6, 2026
- v0.1.4Nov 3, 2026
- v0.1.3Oct 29, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts