network-ai - npm Package Compare versions

Comparing version 4.0.11 to 4.0.12

bin/mcp-server.ts

@@ -32,3 +32,3 @@ #!/usr/bin/env node
  * @module bin/mcp-server
- * @version 4.0.11
+ * @version 4.0.12
  */
@@ -110,3 +110,3 @@
   console.log(`
-network-ai-server — Network-AI MCP Server v4.0.11
+network-ai-server — Network-AI MCP Server v4.0.12
 
@@ -149,3 +149,3 @@ Usage: npx ts-node bin/mcp-server.ts [options]
 
-  console.log(`\n[network-ai-server] Starting MCP Server v4.0.11`);
+  console.log(`\n[network-ai-server] Starting MCP Server v4.0.12`);
   console.log(`[network-ai-server] Board: ${args.board} | Port: ${args.port}`);
@@ -152,0 +152,0 @@

dist/bin/mcp-server.d.ts

@@ -32,5 +32,5 @@ #!/usr/bin/env node
  * @module bin/mcp-server
- * @version 4.0.11
+ * @version 4.0.12
  */
 export {};
 //# sourceMappingURL=mcp-server.d.ts.map

dist/bin/mcp-server.js

@@ -33,3 +33,3 @@ #!/usr/bin/env node
  * @module bin/mcp-server
- * @version 4.0.11
+ * @version 4.0.12
  */
@@ -110,3 +110,3 @@ Object.defineProperty(exports, "__esModule", { value: true });
     console.log(`
-network-ai-server — Network-AI MCP Server v4.0.11
+network-ai-server — Network-AI MCP Server v4.0.12
 
@@ -145,3 +145,3 @@ Usage: npx ts-node bin/mcp-server.ts [options]
     }
-    console.log(`\n[network-ai-server] Starting MCP Server v4.0.11`);
+    console.log(`\n[network-ai-server] Starting MCP Server v4.0.12`);
     console.log(`[network-ai-server] Board: ${args.board} | Port: ${args.port}`);
@@ -148,0 +148,0 @@ // --------------------------------------------------------------------------

dist/index.d.ts

@@ -10,3 +10,3 @@ /**
  * @module SwarmOrchestrator
- * @version 4.0.11
+ * @version 4.0.12
  * @license MIT
@@ -13,0 +13,0 @@ */

dist/lib/mcp-transport-sse.js

@@ -128,3 +128,3 @@ "use strict";
                         capabilities: { tools: {} },
-                        serverInfo: { name: this.name ?? 'network-ai', version: '4.0.11' },
+                        serverInfo: { name: this.name ?? 'network-ai', version: '4.0.12' },
                     });
@@ -131,0 +131,0 @@ // Client signals it's ready — notification (no response needed, but

package.json

 {
   "name": "network-ai",
-  "version": "4.0.11",
+  "version": "4.0.12",
   "description": "AI agent orchestration framework for TypeScript/Node.js - plug-and-play multi-agent coordination with 12 frameworks (LangChain, AutoGen, CrewAI, OpenAI Assistants, LlamaIndex, Semantic Kernel, Haystack, DSPy, Agno, MCP, OpenClaw). Built-in security, swarm intelligence, and agentic workflow patterns.",
@@ -5,0 +5,0 @@ "homepage": "https://github.com/jovanSAPFIONEER/Network-AI#readme",

README.md

@@ -7,3 +7,3 @@ # Network-AI
 [![CodeQL](https://github.com/jovanSAPFIONEER/Network-AI/actions/workflows/codeql.yml/badge.svg)](https://github.com/jovanSAPFIONEER/Network-AI/actions/workflows/codeql.yml)
-[![Release](https://img.shields.io/badge/release-v4.0.11-blue.svg)](https://github.com/jovanSAPFIONEER/Network-AI/releases)
+[![Release](https://img.shields.io/badge/release-v4.0.12-blue.svg)](https://github.com/jovanSAPFIONEER/Network-AI/releases)
 [![npm](https://img.shields.io/npm/dw/network-ai.svg?label=npm%20downloads)](https://www.npmjs.com/package/network-ai)
@@ -10,0 +10,0 @@ [![Tests](https://img.shields.io/badge/tests-1216%20passing-brightgreen.svg)](#testing)

SKILL.md

@@ -11,3 +11,4 @@ ---
         - python3
-        - node
+      optional_bins:
+        - node  # Only needed if you separately install and run the Node.js MCP server (network-ai-server via npm). Not required for this skill's Python instructions.
     env:
@@ -32,2 +33,4 @@ SWARM_TOKEN_SECRET:
 
+> **Scope of this skill bundle:** All instructions below run local Python scripts (`scripts/*.py`). No network calls are made by this skill. The Node.js MCP server (`network-ai-server`) is a **separate optional component** — install it with `npm install -g network-ai` only if you want MCP/IDE integration. It does **not** run automatically and is not part of this skill bundle.
+
 Multi-agent coordination system for complex workflows requiring task delegation, parallel execution, and permission-controlled access to sensitive APIs.
@@ -34,0 +37,0 @@

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 3 instances in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 3 instances in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1282171

0.04%

No dependency changes