registry / claude-mem-lite / 3.35.2

claude-mem-lite@3.35.2

⚠ Under review

Persistent long-term memory for Claude Code via MCP — captures coding decisions, bugfixes, and context across sessions. Hybrid FTS5 + TF-IDF search with episode batching. Single SQLite DB, no external services. A lighter, lower-cost alternative to claude-

Static Scan Results

scanned 14h ago · by rust-scanner

Static analysis flagged 15 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 111 file(s), 1.60 MB of source, external domains: api.anthropic.com, api.github.com, github.com, openrouter.ai, raw.githubusercontent.com

Source & flagged code

7 flagged

haiku-client.mjsView file

Lines 1-27javascript

1// claude-mem-lite: Unified LLM call wrapper

2// Shared by memory (hook.mjs) and dispatch modules

3// Provider priority: ANTHROPIC_API_KEY (direct Anthropic API) →

4// OPENROUTER_API_KEY (OpenRouter, OpenAI-compatible) → claude CLI fallback

5// Model configurable via CLAUDE_MEM_MODEL (haiku|sonnet); OpenRouter slug

6// overridable via OPENROUTER_MODEL

8import { execFileSync, spawn } from 'child_process';

9import http from 'node:http';

High

Child Process

Package source references child process execution.

haiku-client.mjsView on unpkg · L7

10import https from 'node:https';

11import tls from 'node:tls';

12import { readFileSync } from 'fs';

13import { join } from 'path';

14import { randomUUID } from 'crypto';

15import { debugLog, debugCatch, parseJsonFromLLM } from './utils.mjs';

16import { DB_DIR } from './schema.mjs';

18// ─── Proxy support (native fetch ignores HTTP(S)_PROXY) ──────────────────────

19//

20// Node's global fetch (undici) does NOT honour HTTP(S)_PROXY env vars, and

21// undici's ProxyAgent isn't importable without adding a dependency. In an env

22// that requires a local proxy to reach external APIs (e.g.

23// HTTPS_PROXY=http://127.0.0.1:PORT), a direct fetch to openrouter.ai

24// hangs/times out. We tunnel HTTPS through the HTTP CONNECT proxy using built-ins

25// only. No proxy var (or a NO_PROXY host) → null → callers keep native fetch,

26// unchanged (zero behaviour change when no proxy is configured).

27function httpConnectProxyFor(targetUrl) {

install.mjsView file

Lines 1705-1745javascript

1705 );

1706}

1707

1708/**

1709 * Walk every mem-hook command in settings.json and collect any absolute file

1710 * paths that don't currently exist on disk. Used by doctor() to surface

1711 * post-uninstall residue ("/plugin uninstall claude-mem-lite" leaves

1712 * settings.json hooks pointing at ~/.claude-mem-lite/hook.mjs; if the user

1713 * then deleted that directory, every session start dispatches to a missing

1714 * file).

1715 *

1716 * Path extraction: command strings look like:

hook-update.mjsView file

Lines 270-310javascript

270// built per-call from the *tarball's* manifest, not the locally-imported one —

271// see loadReleaseManifest comment for why.

272function buildSwitchablePaths(sourceFiles) {

273 return [...sourceFiles, 'scripts', 'registry', 'node_modules'];

274}

275

276// Load the SOURCE_FILES / HOOK_SCRIPT_FILES manifest from the *extracted

277// tarball's* own source-files.mjs. Critical: the locally-imported

tfidf.mjsView file

Lines 10-50javascript

11export const VOCAB_DIM = 512;

12export const MIN_COSINE_SIMILARITY = 0.05;

13export const VECTOR_SCAN_LIMIT = 500;

14// Reciprocal Rank Fusion constant. Higher k flattens the rank-position weighting

scripts/launch.mjsView file

Lines 1-35javascript

1#!/usr/bin/env node

2// launch.mjs — Auto-installs dependencies then starts MCP server

3// Uses only Node built-ins so it works before npm install

4import { execSync } from 'node:child_process';

5import { existsSync, lstatSync } from 'node:fs';

6import { dirname, join } from 'node:path';

7import { fileURLToPath, pathToFileURL } from 'node:url'

scripts/setup.shView file

•path = scripts/setup.sh kind = build_helper sizeBytes = 11091 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/setup.shView on unpkg

Source & flagged code

7 flagged · loading source

haiku-client.mjsView file

7L8: import { execFileSync, spawn } from 'child_process'; L9: import http from 'node:http';

High

Child Process

Package source references child process execution.

haiku-client.mjsView on unpkg · L7

install.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = claude-mem-lite@3.34.0 matchedIdentity = npm:Y2xhdWRlLW1lbS1saXRl:3.34.0 similarity = 0.818 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

install.mjsView on unpkg

1725* deliberate bias toward **under-reporting over false-flagging**: a wrapper L1726: * like `bash -c "inline" "/real/path.sh"` should report the real path, not L1727: * the inline string. ${CLAUDE_PLUGIN_ROOT}-templated commands are ignored —

High

Shell

Package source references shell execution.

install.mjsView on unpkg · L1725

hook-update.mjsView file

290try { L291: const mod = await import(pathToFileURL(manifestPath).href + `?t=${Date.now()}`); L292: if (!Array.isArray(mod.SOURCE_FILES) || mod.SOURCE_FILES.length === 0) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

hook-update.mjsView on unpkg · L290

tfidf.mjsView file

30export function vectorsEnabled() { L31: return process.env.CLAUDE_MEM_VECTORS === '1'; L32: }

Low

Weak Crypto

Package source references weak cryptographic algorithms.

tfidf.mjsView on unpkg · L30

scripts/launch.mjsView file

15try { L16: execSync('npm install --omit=dev', { L17: cwd: ROOT,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/launch.mjsView on unpkg · L15

scripts/setup.shView file

•path = scripts/setup.sh kind = build_helper sizeBytes = 11091 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/setup.shView on unpkg

Findings

1 Critical3 High5 Medium6 Low

CriticalPrevious Version Dangerous Deltainstall.mjs

HighChild Processhaiku-client.mjs

HighShellinstall.mjs

HighRuntime Package Installscripts/launch.mjs

MediumDynamic Requirehook-update.mjs

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperscripts/setup.sh

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptotfidf.mjs

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

7 flagged

haiku-client.mjsView file

Lines 1-27javascript

1// claude-mem-lite: Unified LLM call wrapper

2// Shared by memory (hook.mjs) and dispatch modules

3// Provider priority: ANTHROPIC_API_KEY (direct Anthropic API) →

4// OPENROUTER_API_KEY (OpenRouter, OpenAI-compatible) → claude CLI fallback

5// Model configurable via CLAUDE_MEM_MODEL (haiku|sonnet); OpenRouter slug

6// overridable via OPENROUTER_MODEL

8import { execFileSync, spawn } from 'child_process';

9import http from 'node:http';

High

Child Process

Package source references child process execution.

haiku-client.mjsView on unpkg · L7

10import https from 'node:https';

11import tls from 'node:tls';

12import { readFileSync } from 'fs';

13import { join } from 'path';

14import { randomUUID } from 'crypto';

15import { debugLog, debugCatch, parseJsonFromLLM } from './utils.mjs';

16import { DB_DIR } from './schema.mjs';

18// ─── Proxy support (native fetch ignores HTTP(S)_PROXY) ──────────────────────

19//

20// Node's global fetch (undici) does NOT honour HTTP(S)_PROXY env vars, and

21// undici's ProxyAgent isn't importable without adding a dependency. In an env

22// that requires a local proxy to reach external APIs (e.g.

23// HTTPS_PROXY=http://127.0.0.1:PORT), a direct fetch to openrouter.ai

24// hangs/times out. We tunnel HTTPS through the HTTP CONNECT proxy using built-ins

25// only. No proxy var (or a NO_PROXY host) → null → callers keep native fetch,

26// unchanged (zero behaviour change when no proxy is configured).

27function httpConnectProxyFor(targetUrl) {

install.mjsView file

Lines 1705-1745javascript

1705 );

1706}

1707

1708/**

1709 * Walk every mem-hook command in settings.json and collect any absolute file

1710 * paths that don't currently exist on disk. Used by doctor() to surface

1711 * post-uninstall residue ("/plugin uninstall claude-mem-lite" leaves

1712 * settings.json hooks pointing at ~/.claude-mem-lite/hook.mjs; if the user

1713 * then deleted that directory, every session start dispatches to a missing

1714 * file).

1715 *

1716 * Path extraction: command strings look like:

hook-update.mjsView file

Lines 270-310javascript

270// built per-call from the *tarball's* manifest, not the locally-imported one —

271// see loadReleaseManifest comment for why.

272function buildSwitchablePaths(sourceFiles) {

273 return [...sourceFiles, 'scripts', 'registry', 'node_modules'];

274}

275

276// Load the SOURCE_FILES / HOOK_SCRIPT_FILES manifest from the *extracted

277// tarball's* own source-files.mjs. Critical: the locally-imported

tfidf.mjsView file

Lines 10-50javascript

11export const VOCAB_DIM = 512;

12export const MIN_COSINE_SIMILARITY = 0.05;

13export const VECTOR_SCAN_LIMIT = 500;

14// Reciprocal Rank Fusion constant. Higher k flattens the rank-position weighting

scripts/launch.mjsView file

Lines 1-35javascript

1#!/usr/bin/env node

2// launch.mjs — Auto-installs dependencies then starts MCP server

3// Uses only Node built-ins so it works before npm install

4import { execSync } from 'node:child_process';

5import { existsSync, lstatSync } from 'node:fs';

6import { dirname, join } from 'node:path';

7import { fileURLToPath, pathToFileURL } from 'node:url'

scripts/setup.shView file

•path = scripts/setup.sh kind = build_helper sizeBytes = 11091 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/setup.shView on unpkg