This release keeps dependencies and maintenance posture current for teams operating this tool.
✓ No known CVEs patched in this version
Topics
+14 more
Summary
AI summaryAdded networkAccess ignore entries for ContextThrottler in socket.json fixing a false‑positive supply chain scan.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Bugfix | Low |
Added networkAccess ignore entries for ContextThrottler in socket.json to resolve false positive supply chain risk. Added networkAccess ignore entries for ContextThrottler in socket.json to resolve false positive supply chain risk. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
Full changelog
v5.5.6 — socket.json Supply Chain Scan Fix
Type: Chore / Supply Chain
Date: 2026-05-18
What changed
Added networkAccess ignore entries to socket.json for ContextThrottler (lib/context-throttler.ts / dist/lib/context-throttler.js).
ContextThrottler is a pure in-memory blackboard-pruning utility — it filters blackboard state to the subset relevant to each agent's declared scope tags. It contains:
- Zero
fetchcalls - Zero outbound network access
- Zero external dependencies (pure TypeScript)
Socket.dev's transitive import-graph analysis was incorrectly flagging it under the networkAccess supply chain risk category, reducing the Supply Chain Security score. The existing socket.json already covered all other flagged files; this entry closes the remaining false positive.
Files changed
socket.json— two newnetworkAccessignore entries added- Version bumped to 5.5.6 in
package.json,skill.json,openapi.yaml,README.md,CLAUDE.md,CODEX.md,ARCHITECTURE.md,BENCHMARKS.md,AUDIT_LOG_SCHEMA.md,INTEGRATION_GUIDE.md,references/adapter-system.md,.github/copilot-instructions.md,SECURITY.md,.github/SECURITY.md,ENTERPRISE.md,CHANGELOG.md
No code changes. All 3,093 tests continue to pass.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Jovancoding/Network-AI
Multi-agent orchestration MCP server with race-condition-safe shared blackboard. 20+ MCP tools: blackboard read/write, agent spawn/stop, FSM transitions, budget tracking, token management, and audit log query. `npx network-ai-server --port 3001`.
Related context
Beta — feedback welcome: [email protected]