This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+14 more
ReleasePort's take
Light signalThe release strips UTF‑8 BOM from package.json, skill.json, and openapi.yaml to stop CI syntax errors. Documentation updates add security scan tables, README rows, and policy links.
Why it matters: Patch v5.4.3 immediately if your CI pipelines ingest these files; the BOM removal prevents SyntaxError crashes that can halt builds.
Summary
AI summaryUTF-8 BOM stripped from package.json, skill.json, and openapi.yaml to prevent CI SyntaxError crashes.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Added SKILL.md security scan findings table documenting ClawHub Notes ASI01, ASI03, ASI06, ASI07 with confidence levels and controls. Added SKILL.md security scan findings table documenting ClawHub Notes ASI01, ASI03, ASI06, ASI07 with confidence levels and controls. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Feature | Medium |
Added README documentation table including SKILL.md row for OpenClaw/ClawHub Python skill details. Added README documentation table including SKILL.md row for OpenClaw/ClawHub Python skill details. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Feature | Medium |
Added Code of Conduct and Security Policy links to README footer. Added Code of Conduct and Security Policy links to README footer. Source: llm_adapter@2026-05-21 Confidence: low |
— |
| Bugfix | Medium |
UTF-8 BOM stripped from package.json, skill.json, and openapi.yaml to prevent CI syntax errors. UTF-8 BOM stripped from package.json, skill.json, and openapi.yaml to prevent CI syntax errors. Source: llm_adapter@2026-05-21 Confidence: high |
— |
Full changelog
Network-AI v5.4.3 — SKILL.md security findings + README doc table + BOM fix
Added
- SKILL.md security scan findings table — new section documents all 4 ClawHub Notes (ASI01, ASI03, ASI06, ASI07) with confidence level, why each recurs by design, and the documented control.
- README documentation table —
SKILL.mdrow added (OpenClaw/ClawHub Python skill — setup, orchestrator protocol, security scan findings). - README footer — Code of Conduct and Security Policy links added.
Fixed
- UTF-8 BOM stripped from
package.json,skill.json, andopenapi.yaml— PowerShellOut-File -Encoding utf8was inserting a BOM that causedts-nodeto crash withSyntaxError: Unexpected tokenin CI.
Stats
- 29 test suites, 2,976 passing assertions (unchanged)
- Zero TypeScript compile errors
Full Changelog
https://github.com/Jovancoding/Network-AI/blob/main/CHANGELOG.md
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Jovancoding/Network-AI
Multi-agent orchestration MCP server with race-condition-safe shared blackboard. 20+ MCP tools: blackboard read/write, agent spawn/stop, FSM transitions, budget tracking, token management, and audit log query. `npx network-ai-server --port 3001`.
Related context
Beta — feedback welcome: [email protected]