[janne-codento]

Dependency setup reported four vulnerable packages, including a critical proxy-addr advisory. Update only the lockfile to patched MCP SDK, fast-uri, ip-address and proxy-addr releases.

Validation: npm ci; npm run build; npm test (1,036 passed, 3 platform/CI skips); npm audit reports zero vulnerabilities.

[coderabbitai]

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters: 1

• package-lock.json is excluded by !**/package-lock.json

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 2d60b5e8-abfc-48b1-94ab-6fc79d37604e

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Sentinel dependency audit — WARN · ✓ ok

144 allow · 5 warn · 0 block · 0 error
provenance: 44 verified · 0 invalid · 105 absent · 0 unknown

package	verdict	score	finding	how to fix
esbuild@0.28.1	warn	62/100	install.js combines launch + write + read primitives — partial materialization pattern.	Review the finding details; approve with a recorded rationale only if you understand and accept the risk.
fast-uri@3.1.8	warn	75/100	Network egress: connects to a hardcoded IP address.	Confirm the egress is expected for this package's purpose; if not, remove it or pin to a version without it.
isexe@2.0.0	warn	77/100	test/basic.js combines read + launch + write primitives — partial materialization pattern.	Review the finding details; approve with a recorded rationale only if you understand and accept the risk.
tsx@4.22.4	warn	76/100	dist/index-D9F1FXzN.cjs combines read + write primitives — partial materialization pattern.	Review the finding details; approve with a recorded rationale only if you understand and accept the risk.
undici-types@7.18.2	warn	64/100	Network egress: imports a raw networking module.	Confirm the egress is expected for this package's purpose; if not, remove it or pin to a version without it.

▶ Run sentinel explain <package> <version> for a suggested safe version and a ready waiver.

_{Sentinel · 149 packages audited · 2026-10-16T06:57:01.783Z · SBOM uploaded as a build artifact}