v4.4.0

knavesec/CredMasterv4.4.0May 12, 2026by sinewaveai

AI Summary

This release fixes a critical packaging bug where source files were missing from the published tarball, causing runtime errors, and updates several core dependencies.

Key Highlights

Fixed missing source files (`semantic-integration.js`, `semantic-analyzer.js`, `github-clone.js`, `npm-download.js`) that caused ERR_MODULE_NOT_FOUND
Updated `fast-uri` to 3.1.2 across root and sub-packages
Updated `hono` to 4.12.18 across multiple packages
Updated `ip-address` and `express-rate-limit` in MCP and Prooflayer scanners

Full Release Notes

## Bug fix

Prior releases imported four files at runtime that were not declared in the published tarball, causing `ERR_MODULE_NOT_FOUND` when the package was installed globally and invoked via the composite Security Scan action. The following are now shipped:

- `src/semantic-integration.js` (imported by `src/tools/scan-security.js`)
- `src/semantic-analyzer.js` (imported by `src/semantic-integration.js`)
- `src/utils/github-clone.js` (imported by `src/cli/scan-clawhub-full.js`)
- `src/utils/npm-download.js` (imported by `src/cli/scan-clawhub-full.js`)

If you were hitting `Cannot find module '.../src/semantic-integration.js'` on `agent-security-scanner-mcp@4.3.0`, upgrade to `4.4.0`.

## Dependency updates

Merged via dependabot rollup:

- `fast-uri` 3.1.0 → 3.1.2 — root, `scanner-lite/`, `mcp-server-full/`, `prooflayer-scanner/` (#82, #84, #83, #86)
- `hono` 4.12.16 → 4.12.18 (root, #85); 4.12.14 → 4.12.18 (`scanner-lite/`, `mcp-server-full/`, `prooflayer-scanner/`, #80/#79/#81)
- `ip-address` 10.1.0 → 10.2.0, `express-rate-limit` 8.3.0 → 8.5.1 (`mcp-server-full/`, `prooflayer-scanner/`, #77, #78)

## Install

```sh
npm install -g agent-security-scanner-mcp@4.4.0
```

**Full Changelog**: https://github.com/sinewaveai/agent-security-scanner-mcp/compare/v4.3.0...v4.4.0