Dependency + Secret Scan Audit — Themis 🛡️
Date: 2026-05-22
Scope: Full repo dependency audit + gitleaks secret scan
Part 1: Dependency Audit
npm audit
npm audit --omit=dev → 0 vulnerabilities
npm audit (including dev) → 0 vulnerabilities
dashboard/npm audit → 0 vulnerabilities
npm audit signatures → 542 packages verified, 159 attestations verified
Verdict: ✅ CLEAN — no vulnerable packages in the dependency tree.
Dependabot Alerts
| State |
Count |
| Fixed |
43 |
| Open |
5 (all undici, Node.js bundled) |
Open Alerts — undici CVEs
Current version: Node.js v22.22.1 ships undici 6.23.0.
Risk assessment:
- CVE-2026-22036: Patched at 6.23.0 → ✅ WE ARE PATCHED
- CVE-2026-1526, 1527, 1525, 2229: Require 6.24.0 → ⚠️ VULNERABLE but LOW EXPLOITABILITY
- Aegis uses fetch() for outbound HTTP to trusted endpoints (IdP, localhost)
- WebSocket usage limited to server-side terminal streaming
- No user-controlled outbound WebSocket connections
- CRLF injection and smuggling require attacker-controlled server responses
- Memory DoS requires attacker-controlled WebSocket server
Recommendation: Monitor for Node.js v22 update bundling undici >= 6.24.0. No emergency action needed.
Part 2: Secret Scan (Gitleaks)
gitleaks detect --source . --no-git
→ 55 findings, 156.62 MB scanned
Findings by category
| Category |
Count |
Risk |
| Test fixtures (redact tests) |
21 |
✅ Safe — example secrets |
| Docs/examples (guides, API) |
20 |
✅ Safe — placeholder values |
| Gitignored config files |
9 |
✅ Safe — not tracked by git |
| claude-internals (not tracked) |
4 |
✅ Safe — not tracked by git |
| Real tracked secrets |
1 |
⚠️ Review needed |
Finding that needs review
File: .mcp.json (gitignored, NOT tracked)
Token: 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 (GitHub OAuth)
This file IS in .gitignore and NOT tracked by git. However, this is a real GitHub OAuth token in a local config file.
Recommendation:
- Confirm this token is scoped and revocable
- Consider moving to environment variable instead of plaintext .mcp.json
- Ensure .mcp.json stays in .gitignore
Also detected but safe
.aegis/config.yaml: clientAuthToken — gitignored, not tracked.claude/settings.local.json: ANTHROPIC_AUTH_TOKEN — gitignored, not tracked.mcp.json: Z_AI_API_KEY — gitignored, not tracked
All local development credentials in gitignored files.
Summary
| Area |
Status |
Action |
| npm audit |
✅ 0 vulns |
None |
| Package signatures |
✅ All verified |
None |
| Dependabot fixed |
✅ 43 resolved |
None |
| Dependabot open (undici) |
⚠️ 5 open, LOW exposure |
Monitor Node update |
| Secret scan - tests/docs |
✅ Safe |
None |
| Secret scan - gitignored configs |
✅ Safe |
None |
| Secret scan - .mcp.json token |
⚠️ Real token, local only |
Review scope |
Overall: ✅ HEALTHY. No critical findings.
— Themis 🛡️
Dependency + Secret Scan Audit — Themis 🛡️
Date: 2026-05-22
Scope: Full repo dependency audit + gitleaks secret scan
Part 1: Dependency Audit
npm audit
Verdict: ✅ CLEAN — no vulnerable packages in the dependency tree.
Dependabot Alerts
Open Alerts — undici CVEs
Current version: Node.js v22.22.1 ships undici 6.23.0.
Risk assessment:
Recommendation: Monitor for Node.js v22 update bundling undici >= 6.24.0. No emergency action needed.
Part 2: Secret Scan (Gitleaks)
Findings by category
Finding that needs review
File:
.mcp.json(gitignored, NOT tracked)Token:
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(GitHub OAuth)This file IS in
.gitignoreand NOT tracked by git. However, this is a real GitHub OAuth token in a local config file.Recommendation:
Also detected but safe
.aegis/config.yaml: clientAuthToken — gitignored, not tracked.claude/settings.local.json: ANTHROPIC_AUTH_TOKEN — gitignored, not tracked.mcp.json: Z_AI_API_KEY — gitignored, not trackedAll local development credentials in gitignored files.
Summary
Overall: ✅ HEALTHY. No critical findings.
— Themis 🛡️