v4.4.0

snarktank/ralphv4.4.0May 12, 2026by sinewaveai

AI Summary

This release fixes a critical bug where source files were missing from the published tarball, causing ERR_MODULE_NOT_FOUND errors. It also includes updates to several dependencies including fast-uri, hono, and express-rate-limit.

Key Highlights

Fixes ERR_MODULE_NOT_FOUND errors caused by missing source files in the published tarball.
Adds missing source files: semantic-integration.js, semantic-analyzer.js, github-clone.js, and npm-download.js.
Updates fast-uri to 3.1.2, hono to 4.12.18, ip-address to 10.2.0, and express-rate-limit to 8.5.1.

Full Release Notes

## Bug fix

Prior releases imported four files at runtime that were not declared in the published tarball, causing `ERR_MODULE_NOT_FOUND` when the package was installed globally and invoked via the composite Security Scan action. The following are now shipped:

- `src/semantic-integration.js` (imported by `src/tools/scan-security.js`)
- `src/semantic-analyzer.js` (imported by `src/semantic-integration.js`)
- `src/utils/github-clone.js` (imported by `src/cli/scan-clawhub-full.js`)
- `src/utils/npm-download.js` (imported by `src/cli/scan-clawhub-full.js`)

If you were hitting `Cannot find module '.../src/semantic-integration.js'` on `agent-security-scanner-mcp@4.3.0`, upgrade to `4.4.0`.

## Dependency updates

Merged via dependabot rollup:

- `fast-uri` 3.1.0 → 3.1.2 — root, `scanner-lite/`, `mcp-server-full/`, `prooflayer-scanner/` (#82, #84, #83, #86)
- `hono` 4.12.16 → 4.12.18 (root, #85); 4.12.14 → 4.12.18 (`scanner-lite/`, `mcp-server-full/`, `prooflayer-scanner/`, #80/#79/#81)
- `ip-address` 10.1.0 → 10.2.0, `express-rate-limit` 8.3.0 → 8.5.1 (`mcp-server-full/`, `prooflayer-scanner/`, #77, #78)

## Install

```sh
npm install -g agent-security-scanner-mcp@4.4.0
```

**Full Changelog**: https://github.com/sinewaveai/agent-security-scanner-mcp/compare/v4.3.0...v4.4.0