NodeSecure · fraxken · Mar 21, 2026 · Mar 21, 2026
diff --git a/.changeset/clever-dodos-stand.md b/.changeset/clever-dodos-stand.md
diff --git a/.changeset/floppy-items-type.md b/.changeset/floppy-items-type.md
diff --git a/.changeset/orange-teeth-appear.md b/.changeset/orange-teeth-appear.md
diff --git a/.changeset/polite-lamps-jam.md b/.changeset/polite-lamps-jam.md
diff --git a/workspaces/mama/CHANGELOG.md b/workspaces/mama/CHANGELOG.md
@@ -1,5 +1,11 @@
 # @nodesecure/mama
 
+## 2.2.0
+
+### Minor Changes
+
+- [#670](https://github.com/NodeSecure/scanner/pull/670) [`7937d38`](https://github.com/NodeSecure/scanner/commit/7937d386de2dfdcf615e710e7f50382ce1a37d1a) Thanks [@fraxken](https://github.com/fraxken)! - Use ManifestManager in NPM TreeWalker class
+
 ## 2.1.1
 
 ### Patch Changes

diff --git a/workspaces/mama/package.json b/workspaces/mama/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@nodesecure/mama",
-  "version": "2.1.1",
+  "version": "2.2.0",
   "description": "Manifest Manager",
   "type": "module",
   "exports": "./dist/index.js",

diff --git a/workspaces/scanner/CHANGELOG.md b/workspaces/scanner/CHANGELOG.md
@@ -1,5 +1,20 @@
 # @nodesecure/scanner
 
+## 10.6.0
+
+### Minor Changes
+
+- [#675](https://github.com/NodeSecure/scanner/pull/675) [`dc40fb3`](https://github.com/NodeSecure/scanner/commit/dc40fb3f263ce9866188cc463f8c52682e226c8c) Thanks [@clemgbld](https://github.com/clemgbld)! - feat(scanner): log error only in verbose mode
+
+- [#677](https://github.com/NodeSecure/scanner/pull/677) [`cef7c24`](https://github.com/NodeSecure/scanner/commit/cef7c24b1c1ec95833c4c323829e6b0a410a7513) Thanks [@fraxken](https://github.com/fraxken)! - Implement a new maxConcurrency options to configure how much NPM tarballs we scan/limit in depWalker
+
+### Patch Changes
+
+- Updated dependencies [[`7937d38`](https://github.com/NodeSecure/scanner/commit/7937d386de2dfdcf615e710e7f50382ce1a37d1a), [`c839e46`](https://github.com/NodeSecure/scanner/commit/c839e46769e9b0dcc1be09e9f3a6e780fb0bbb6d)]:
+  - @nodesecure/tree-walker@2.7.0
+  - @nodesecure/mama@2.2.0
+  - @nodesecure/tarball@3.7.0
+
 ## 10.5.1
 
 ### Patch Changes

diff --git a/workspaces/scanner/package.json b/workspaces/scanner/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@nodesecure/scanner",
-  "version": "10.5.1",
+  "version": "10.6.0",
   "description": "A package API to run a static analysis of your module's dependencies.",
   "type": "module",
   "exports": {
@@ -69,12 +69,12 @@
     "@nodesecure/flags": "^3.0.3",
     "@nodesecure/i18n": "^4.1.0",
     "@nodesecure/js-x-ray": "14.2.0",
-    "@nodesecure/mama": "^2.1.1",
+    "@nodesecure/mama": "^2.2.0",
     "@nodesecure/npm-registry-sdk": "^4.4.0",
     "@nodesecure/npm-types": "^1.3.0",
     "@nodesecure/rc": "^5.5.0",
-    "@nodesecure/tarball": "^3.6.1",
-    "@nodesecure/tree-walker": "^2.6.0",
+    "@nodesecure/tarball": "^3.7.0",
+    "@nodesecure/tree-walker": "^2.7.0",
     "@nodesecure/utils": "^2.3.0",
     "@nodesecure/vulnera": "3.0.0",
     "@openally/mutex": "^2.0.0",

diff --git a/workspaces/tarball/CHANGELOG.md b/workspaces/tarball/CHANGELOG.md
@@ -1,5 +1,16 @@
 # @nodesecure/tarball
 
+## 3.7.0
+
+### Minor Changes
+
+- [#676](https://github.com/NodeSecure/scanner/pull/676) [`c839e46`](https://github.com/NodeSecure/scanner/commit/c839e46769e9b0dcc1be09e9f3a6e780fb0bbb6d) Thanks [@clemgbld](https://github.com/clemgbld)! - refactor(tarball): improve dns resolver
+
+### Patch Changes
+
+- Updated dependencies [[`7937d38`](https://github.com/NodeSecure/scanner/commit/7937d386de2dfdcf615e710e7f50382ce1a37d1a)]:
+  - @nodesecure/mama@2.2.0
+
 ## 3.6.1
 
 ### Patch Changes

diff --git a/workspaces/tarball/package.json b/workspaces/tarball/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@nodesecure/tarball",
-  "version": "3.6.1",
+  "version": "3.7.0",
   "description": "NodeSecure tarball scanner",
   "type": "module",
   "exports": {
@@ -48,7 +48,7 @@
     "@nodesecure/conformance": "^1.2.1",
     "@nodesecure/fs-walk": "^2.0.0",
     "@nodesecure/js-x-ray": "14.2.0",
-    "@nodesecure/mama": "^2.1.1",
+    "@nodesecure/mama": "^2.2.0",
     "@nodesecure/npm-types": "^1.2.0",
     "@nodesecure/utils": "^2.3.0",
     "ipaddr.js": "2.3.0",

diff --git a/workspaces/tree-walker/CHANGELOG.md b/workspaces/tree-walker/CHANGELOG.md
@@ -1,5 +1,16 @@
 # @nodesecure/tree-walker
 
+## 2.7.0
+
+### Minor Changes
+
+- [#670](https://github.com/NodeSecure/scanner/pull/670) [`7937d38`](https://github.com/NodeSecure/scanner/commit/7937d386de2dfdcf615e710e7f50382ce1a37d1a) Thanks [@fraxken](https://github.com/fraxken)! - Use ManifestManager in NPM TreeWalker class
+
+### Patch Changes
+
+- Updated dependencies [[`7937d38`](https://github.com/NodeSecure/scanner/commit/7937d386de2dfdcf615e710e7f50382ce1a37d1a)]:
+  - @nodesecure/mama@2.2.0
+
 ## 2.6.0
 
 ### Minor Changes

diff --git a/workspaces/tree-walker/package.json b/workspaces/tree-walker/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@nodesecure/tree-walker",
-  "version": "2.6.0",
+  "version": "2.7.0",
   "description": "NodeSecure tree walker",
   "type": "module",
   "exports": "./dist/index.js",
@@ -38,7 +38,7 @@
   "homepage": "https://github.com/NodeSecure/tree/master/workspaces/tree-walker#readme",
   "dependencies": {
     "@nodesecure/js-x-ray": "14.2.0",
-    "@nodesecure/mama": "2.1.1",
+    "@nodesecure/mama": "2.2.0",
     "@nodesecure/npm-registry-sdk": "^4.0.0",
     "@nodesecure/npm-types": "^1.1.0",
     "@npmcli/arborist": "9.4.0",