Release
v5.5.6 — socket.json Supply Chain Scan Fix
Type: Chore / Supply Chain
Read the release here or open the original release on GitHub.
v5.5.6 — socket.json Supply Chain Scan Fix
Type: Chore / Supply Chain Date: 2026-05-18
What changed
Added networkAccess ignore entries to socket.json for ContextThrottler (lib/context-throttler.ts / dist/lib/context-throttler.js).
ContextThrottler is a pure in-memory blackboard-pruning utility — it filters blackboard state to the subset relevant to each agent's declared scope tags. It contains:
- Zero
fetchcalls - Zero outbound network access
- Zero external dependencies (pure TypeScript)
Socket.dev's transitive import-graph analysis was incorrectly flagging it under the networkAccess supply chain risk category, reducing the Supply Chain Security score. The existing socket.json already covered all other flagged files; this entry closes the remaining false positive.
Files changed
socket.json— two newnetworkAccessignore entries added- Version bumped to 5.5.6 in
package.json,skill.json,openapi.yaml,README.md,CLAUDE.md,CODEX.md,ARCHITECTURE.md,BENCHMARKS.md,AUDIT_LOG_SCHEMA.md,INTEGRATION_GUIDE.md,references/adapter-system.md,.github/copilot-instructions.md,SECURITY.md,.github/SECURITY.md,ENTERPRISE.md,CHANGELOG.md
No code changes. All 3,093 tests continue to pass.