Loading npm security reports…
SQLite-backed MCP memory server (MindBrain + Zig backend), part of the MindBrain ecosystem.
Static analysis flagged 17 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgPackage source references child process execution.
bin/lib/prebuild-permissions.mjsView on unpkg · L11Package source references dynamic require/import behavior.
bin/lib/sqlite-file-count.mjsView on unpkg · L2Package source references weak cryptographic algorithms.
dist/tools/business-query-learning/register-proposal.jsView on unpkg · L245Source writes installer persistence such as shell profile or service configuration.
bin/lib/path-shim.mjsView on unpkg · L23A single source file combines environment access, network access, and code or shell execution; review context before blocking.
bin/commands/serve.mjsView on unpkg · L314Package ships non-JavaScript build or shell helper files.
docs/installers/beta-bundle/MakefileView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkg · L63Package ships non-JavaScript build or shell helper files.
docs/installers/beta-bundle/MakefileView on unpkgPackage source references child process execution.
bin/lib/prebuild-permissions.mjsView on unpkg · L11Package source references dynamic require/import behavior.
bin/lib/sqlite-file-count.mjsView on unpkg · L2Package source references weak cryptographic algorithms.
dist/tools/business-query-learning/register-proposal.jsView on unpkg · L245Source writes installer persistence such as shell profile or service configuration.
bin/lib/path-shim.mjsView on unpkg · L23A single source file combines environment access, network access, and code or shell execution; review context before blocking.
bin/commands/serve.mjsView on unpkg · L314