registry / @lh8ppl/claude-memory-kit / 0.5.2

@lh8ppl/claude-memory-kit@0.5.2

cmk — the CLI for claude-memory-kit. Per-project, in-repo memory system for Claude Code.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 12 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 128 file(s), 1.47 MB of source, external domains: www.apple.com

Source & flagged code

5 flagged

src/poison-guard.mjsView file

Lines 79-119javascript

79 },

80 // AWS secret access key in a key=value shape. The value pattern is

81 // intentionally lenient (40-char Base64-ish) because real AWS secret

82 // keys are 40 chars of Base64. We require the `aws_secret` token

83 // nearby to gate on intent.

84 {

85 id: 'secret_aws_secret_access_key',

Source & flagged code

5 flagged · loading source

src/poison-guard.mjsView file

99patternName = private_key_rsa severity = critical line = 99 matchedText = // varia...---`

Critical

Critical Secret

Package contains a critical-looking secret pattern.

src/poison-guard.mjsView on unpkg · L99

99patternName = private_key_rsa severity = critical line = 99 matchedText = // varia...---`

Critical

Secret Pattern

RSA private key in src/poison-guard.mjs

src/poison-guard.mjsView on unpkg · L99

bin/cmk-weekly-curate.mjsView file

28try { L29: ({ weeklyCurate } = await import(pathToFileURL(weeklyCurateModulePath).href)); L30: ({ makeBackend } = await import(pathToFileURL(makeBackendModulePath).href));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/cmk-weekly-curate.mjsView on unpkg · L28

src/register-crons.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @lh8ppl/claude-memory-kit@0.4.4 matchedIdentity = npm:[redacted]:0.4.4 similarity = 0.450 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/register-crons.mjsView on unpkg

4// daily-distill bin wrapper runs at 23:00 local time without users L5: // learning crontab / launchd / schtasks themselves. L6: // ... L30: L31: import { spawnSync } from 'node:child_process'; L32: import { existsSync, mkdirSync, writeFileSync, unlinkSync } from 'node:fs'; ... L56: export function detectPlatform() { L57: return process.platform; // 'linux' | 'darwin' | 'win32' (other: bsd etc.) L58: } ... L70: function macOsPlistPath(entryName) { L71: return join(homedir(), 'Library', 'LaunchAgents', `com.cmk.${entryName}.plist`); L72: }

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

src/register-crons.mjsView on unpkg · L4

Findings

2 Critical1 High4 Medium5 Low

CriticalCritical Secretsrc/poison-guard.mjs

CriticalSecret Patternsrc/poison-guard.mjs

HighPrevious Version Dangerous Deltasrc/register-crons.mjs

MediumDynamic Requirebin/cmk-weekly-curate.mjs

MediumEnvironment Vars

MediumInstall Persistencesrc/register-crons.mjs

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

bin/cmk-weekly-curate.mjsView file

Lines 8-48javascript

8//

9// Composes on weeklyCurate() per design §8.7.1. Always exits 0 — a

10// crashed cron job rotates noise into the scheduler logs without any

11// recovery affordance for the user; the kit's curate.log NDJSON +

12// cooldown marker are the load-bearing observability surfaces.

14import { dirname, join } from 'node:path';

15import { homedir } from 'node:os';

16import { fileURLToPath, pathToFileURL } from 'node:url';

18const __filename = fileURLToPath(import.meta.url);

19const __dirname = dirname(__filename);

21const weeklyCurateModulePath = join(__dirname, '..', 'src', 'weekly-curate.mjs');

22const makeBackendModulePath = join(__dirname, '..', 'src', 'make-backend.mjs');

23const compactionStateModulePath = join(__dirname, '..', 'src', 'compaction-state.mjs');

25let weeklyCurate;

26let makeBackend;

27let recordCronHeartbeat;

28try {

29 ({ weeklyCurate } = await import(pathToFileURL(weeklyCurateModulePath).href));

30 ({ makeBackend } = await import(pathToFileURL(makeBackendModulePath).href));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/cmk-weekly-curate.mjsView on unpkg · L28

31 ({ recordCronHeartbeat } = await import(pathToFileURL(compactionStateModulePath).href));

32} catch (err) {

33 process.stderr.write(

34 `cmk-weekly-curate: failed to load modules: ${err?.message ?? err}\n`,

35 );

36 process.exit(0);

37}

39// Task 36 B1 fix: accept projectRoot via argv[2] (the registered cron

40// emits an absolute path here). Env var + cwd remain as fallbacks.

41// See cmk-daily-distill.mjs for rationale.

42const argvRoot = process.argv[2] && process.argv[2].length > 0 ? process.argv[2] : null;

43const envRoot = process.env.CMK_PROJECT_DIR && process.env.CMK_PROJECT_DIR.length > 0

44 ? process.env.CMK_PROJECT_DIR

45 : null;

46const projectRoot = argvRoot ?? envRoot ?? process.cwd();

48// User tier (cross-project) lives at ~/.claude-memory-kit. Passing it

src/register-crons.mjsView file

Lines 1-24javascript

1// Cross-platform host-scheduler registration (Task 33.2, T-028).

2//

3// Composes the platform-native scheduler primitive on each OS so the

4// daily-distill bin wrapper runs at 23:00 local time without users

5// learning crontab / launchd / schtasks themselves.

6//

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

src/register-crons.mjsView on unpkg · L4

7// Per design §8.6.2:

8// Linux → crontab pipe pattern (idempotent via grep -v + re-add)

9// macOS → launchd plist + launchctl bootstrap

10// Windows → schtasks /Create /F (force-overwrite for idempotency)

11//

12// Per design §8.6.3:

13// Node, not Python. The kit is already Node-only; adding Python means

14// new test infra + install dep. spawnSync to the platform-native

15// scheduler binary is the established kit pattern (compressor.mjs,

16// capture-turn.mjs).

17//

18// Public boundary:

19// registerCron({command, options?}) → {action, platform, command,

20// executed, output, error?}

21// unregisterCron({options?}) → same shape

22// detectPlatform() → 'linux' | 'darwin' | 'win32'

23//

24// `options.dryRun: true` returns the platform-detected command WITHOUT

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

src/register-crons.mjsView on unpkg