This release fixes issues for SREs watching stability and regressions.
✓ No known CVEs patched in this version
Topics
+14 more
Affected surfaces
Summary
AI summaryFixed missing module errors by shipping four previously undeclared source files.
Full changelog
Bug fix
Prior releases imported four files at runtime that were not declared in the published tarball, causing ERR_MODULE_NOT_FOUND when the package was installed globally and invoked via the composite Security Scan action. The following are now shipped:
src/semantic-integration.js(imported bysrc/tools/scan-security.js)src/semantic-analyzer.js(imported bysrc/semantic-integration.js)src/utils/github-clone.js(imported bysrc/cli/scan-clawhub-full.js)src/utils/npm-download.js(imported bysrc/cli/scan-clawhub-full.js)
If you were hitting Cannot find module '.../src/semantic-integration.js' on [email protected], upgrade to 4.4.0.
Dependency updates
Merged via dependabot rollup:
fast-uri3.1.0 → 3.1.2 — root,scanner-lite/,mcp-server-full/,prooflayer-scanner/(#82, #84, #83, #86)hono4.12.16 → 4.12.18 (root, #85); 4.12.14 → 4.12.18 (scanner-lite/,mcp-server-full/,prooflayer-scanner/, #80/#79/#81)ip-address10.1.0 → 10.2.0,express-rate-limit8.3.0 → 8.5.1 (mcp-server-full/,prooflayer-scanner/, #77, #78)
Install
npm install -g [email protected]
Full Changelog: https://github.com/sinewaveai/agent-security-scanner-mcp/compare/v4.3.0...v4.4.0
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Agent Security Scanner Mcp
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]