registry / @cairnkeep/cli / 1.0.2

@cairnkeep/cli@1.0.2

A durable, harness-agnostic memory + context layer for coding agents (Claude Code, OpenCode).

Static Scan Results

scanned 8h ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 9 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 8 file(s), 82.9 KB of source

Source & flagged code

2 flagged

mcp-memory-server/dist/explore-cache.jsView file

Lines 1-21javascript

1import { execFileSync } from "node:child_process";

2import { createHash } from "node:crypto";

3import { existsSync, mkdirSync, readFileSync, readdirSync, statSync, unlinkSync, writeFileSync, } from "node:fs";

4import { homedir } from "node:os";

5import { join } from "node:path";

6const PRUNE_CAP = 200;

7const MAX_BUFFER = 64 * 1024 * 1024;

8// D-11: cache dir lives OUTSIDE any explored repo -- never build it from

9// repoRoot.

10export function exploreCacheDir() {

11 const base = process.env.XDG_CACHE_HOME ?? join(homedir(), ".cache");

12 return join(base, "cairn", "explore");

Low

Weak Crypto

Package source references weak cryptographic algorithms.

mcp-memory-server/dist/explore-cache.jsView on unpkg · L1

13}

14// Trim + collapse internal whitespace runs to a single space; case preserved.

15// Two prompts differing only in whitespace produce the same cache key.

16export function normalizeExploreQuery(query) {

17 return query.trim().replace(/\s+/g, " ");

18}

19export function exploreCacheKey(normalizedQuery, resolvedRepoRoot, head, dirtyHash) {

20 return createHash("sha1")

21 .update(`${normalizedQuery}\0${resolvedRepoRoot}\0${head}\0${dirtyHash}`)

claude/hooks/memory-wakeup.shView file

•path = claude/hooks/memory-wakeup.sh kind = build_helper sizeBytes = 1921 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

claude/hooks/memory-wakeup.shView on unpkg

Source & flagged code

2 flagged · loading source

mcp-memory-server/dist/explore-cache.jsView file

1import { execFileSync } from "node:child_process"; L2: import { createHash } from "node:crypto"; ... L10: export function exploreCacheDir() { L11: const base = process.env.XDG_CACHE_HOME ?? join(homedir(), ".cache"); L12: return join(base, "cairn", "explore"); ... L31: export function computeRepoState(repoRoot) { L32: // stdio ignores the child's stderr so a non-git repoRoot (or any git L33: // failure) doesn't leak "fatal: not a git repository" noise onto the ... L60: } L61: return JSON.parse(readFileSync(path, "utf8")); L62: }

Low

Weak Crypto

Package source references weak cryptographic algorithms.

mcp-memory-server/dist/explore-cache.jsView on unpkg · L1

claude/hooks/memory-wakeup.shView file

•path = claude/hooks/memory-wakeup.sh kind = build_helper sizeBytes = 1921 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

claude/hooks/memory-wakeup.shView on unpkg

Findings

4 Medium5 Low

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperclaude/hooks/memory-wakeup.sh

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptomcp-memory-server/dist/explore-cache.js

LowFilesystem

LowHigh Entropy Strings

Source & flagged code

2 flagged

mcp-memory-server/dist/explore-cache.jsView file

Lines 1-21javascript

1import { execFileSync } from "node:child_process";

2import { createHash } from "node:crypto";

3import { existsSync, mkdirSync, readFileSync, readdirSync, statSync, unlinkSync, writeFileSync, } from "node:fs";

4import { homedir } from "node:os";

5import { join } from "node:path";

6const PRUNE_CAP = 200;

7const MAX_BUFFER = 64 * 1024 * 1024;

8// D-11: cache dir lives OUTSIDE any explored repo -- never build it from

9// repoRoot.

10export function exploreCacheDir() {

11 const base = process.env.XDG_CACHE_HOME ?? join(homedir(), ".cache");

12 return join(base, "cairn", "explore");

Low

Weak Crypto

Package source references weak cryptographic algorithms.

mcp-memory-server/dist/explore-cache.jsView on unpkg · L1

13}

14// Trim + collapse internal whitespace runs to a single space; case preserved.

15// Two prompts differing only in whitespace produce the same cache key.

16export function normalizeExploreQuery(query) {

17 return query.trim().replace(/\s+/g, " ");

18}

19export function exploreCacheKey(normalizedQuery, resolvedRepoRoot, head, dirtyHash) {

20 return createHash("sha1")

21 .update(`${normalizedQuery}\0${resolvedRepoRoot}\0${head}\0${dirtyHash}`)

claude/hooks/memory-wakeup.shView file

•path = claude/hooks/memory-wakeup.sh kind = build_helper sizeBytes = 1921 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

claude/hooks/memory-wakeup.shView on unpkg