network-ai - npm Package Compare versions

Comparing version 4.0.5 to 4.0.6

socket.json

+{
+  "version": 2,
+  "ignore": {
+    "evalDynamicCodeExecution": [
+      {
+        "path": "dist/lib/blackboard-validator.js",
+        "reason": "False positive — this is a security detection pattern that scans for eval() usage in untrusted agent code. It is not dynamic code execution."
+      }
+    ],
+    "networkAccess": [
+      {
+        "path": "dist/adapters/custom-adapter.js",
+        "reason": "Intentional — CustomAdapter is a user-configured HTTP adapter that calls a user-supplied URL (config.url) to connect to external AI endpoints. Network access is the explicit purpose of this adapter."
+      },
+      {
+        "path": "dist/lib/mcp-transport-sse.ts",
+        "reason": "Intentional — McpSseTransport is an HTTP/SSE transport layer for the MCP protocol. Both the server (createServer) and client (http.request) directions are the explicit purpose of this module."
+      },
+      {
+        "path": "dist/lib/mcp-transport-sse.js",
+        "reason": "Intentional — McpSseTransport is an HTTP/SSE transport layer for the MCP protocol. Both the server (createServer) and client (http.request) directions are the explicit purpose of this module."
+      },
+      {
+        "path": "dist/bin/mcp-server.js",
+        "reason": "Intentional — network-ai-server is an opt-in CLI binary that starts an HTTP/SSE server to expose the Network-AI tool suite over MCP. Users invoke it explicitly; it is not a background side-effect."
+      }
+    ]
+  }
+}

bin/mcp-server.ts

@@ -32,3 +32,3 @@ #!/usr/bin/env node
  * @module bin/mcp-server
- * @version 4.0.0
+ * @version 4.0.6
  */
@@ -107,3 +107,3 @@
   console.log(`
-network-ai-server — Network-AI MCP Server v4.0.0
+network-ai-server — Network-AI MCP Server v4.0.6
 
@@ -145,3 +145,3 @@ Usage: npx ts-node bin/mcp-server.ts [options]
 
-  console.log(`\n[network-ai-server] Starting MCP Server v4.0.0`);
+  console.log(`\n[network-ai-server] Starting MCP Server v4.0.6`);
   console.log(`[network-ai-server] Board: ${args.board} | Port: ${args.port}`);
@@ -148,0 +148,0 @@

dist/bin/mcp-server.d.ts

@@ -32,5 +32,5 @@ #!/usr/bin/env node
  * @module bin/mcp-server
- * @version 4.0.0
+ * @version 4.0.6
  */
 export {};
 //# sourceMappingURL=mcp-server.d.ts.map

dist/bin/mcp-server.js

@@ -33,3 +33,3 @@ #!/usr/bin/env node
  * @module bin/mcp-server
- * @version 4.0.0
+ * @version 4.0.6
  */
@@ -106,3 +106,3 @@ Object.defineProperty(exports, "__esModule", { value: true });
     console.log(`
-network-ai-server — Network-AI MCP Server v4.0.0
+network-ai-server — Network-AI MCP Server v4.0.6
 
@@ -140,3 +140,3 @@ Usage: npx ts-node bin/mcp-server.ts [options]
     }
-    console.log(`\n[network-ai-server] Starting MCP Server v4.0.0`);
+    console.log(`\n[network-ai-server] Starting MCP Server v4.0.6`);
     console.log(`[network-ai-server] Board: ${args.board} | Port: ${args.port}`);
@@ -143,0 +143,0 @@ // --------------------------------------------------------------------------

package.json

 {
   "name": "network-ai",
-  "version": "4.0.5",
+  "version": "4.0.6",
   "description": "AI agent orchestration framework for TypeScript/Node.js - plug-and-play multi-agent coordination with 12 frameworks (LangChain, AutoGen, CrewAI, OpenAI Assistants, LlamaIndex, Semantic Kernel, Haystack, DSPy, Agno, MCP, OpenClaw). Built-in security, swarm intelligence, and agentic workflow patterns.",
@@ -99,4 +99,5 @@ "main": "dist/index.js",
     "SKILL.md",
-    "LICENSE"
+    "LICENSE",
+    "socket.json"
   ]
 }

README.md

@@ -7,3 +7,3 @@ # Network-AI: Multi-Agent Orchestration Framework
 [![CodeQL](https://github.com/jovanSAPFIONEER/Network-AI/actions/workflows/codeql.yml/badge.svg)](https://github.com/jovanSAPFIONEER/Network-AI/actions/workflows/codeql.yml)
-[![Release](https://img.shields.io/badge/release-v4.0.5-blue.svg)](https://github.com/jovanSAPFIONEER/Network-AI/releases)
+[![Release](https://img.shields.io/badge/release-v4.0.6-blue.svg)](https://github.com/jovanSAPFIONEER/Network-AI/releases)
 [![npm](https://img.shields.io/npm/dw/network-ai.svg?label=npm%20downloads)](https://www.npmjs.com/package/network-ai)
@@ -10,0 +10,0 @@ [![ClawHub](https://img.shields.io/badge/ClawHub-network--ai-orange.svg)](https://clawhub.ai/skills/network-ai)

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 3 instances in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 3 instances in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1252610

0.12%

Number of package files

162

0.62%

Lines of code

19968

0.15%

No dependency changes