registry / memory-recall / 1.1.0

memory-recall@1.1.0

Local-first Recall Map, repo memory, and context for coding agents.

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 17 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 98 file(s), 2.49 MB of source, external domains: 127.0.0.1, api.example.test, example.com, example.invalid, generativelanguage.googleapis.com, github.com, www.npmjs.com

Source & flagged code

9 flagged

scripts/native-smoke.mjsView file

Lines 33-77javascript

34 const pack = validateAgentPack(JSON.parse(await readFile('examples/agentpacks/content-intelligence.agentpack.json', 'utf8')));

35 const fingerprint = fingerprintAgentPack(pack);

Source & flagged code

9 flagged · loading source

scripts/native-smoke.mjsView file

53patternName = generic_password severity = medium line = 53 matchedText = password...le',

Medium

Secret Pattern

Package contains a possible secret pattern.

scripts/native-smoke.mjsView on unpkg · L53

57patternName = generic_password severity = medium line = 57 matchedText = const ve... });

Medium

Secret Pattern

Hardcoded password in scripts/native-smoke.mjs

scripts/native-smoke.mjsView on unpkg · L57

scripts/rust-semantic-ri-quality.mjsView file

1import assert from 'node:assert/strict'; L2: import { spawnSync } from 'node:child_process'; L3: import { existsSync, mkdtempSync, rmSync } from 'node:fs';

High

Child Process

Package source references child process execution.

scripts/rust-semantic-ri-quality.mjsView on unpkg · L1

providers/native/context-candidate-ast-code/src/index.mjsView file

1922const imports = []; L1923: for (const match of String(body ?? '').matchAll(/^\s*import(?!\s*['"])(?:\s+type)?\s+([\s\S]*?)\s+from\s+['"]([^'"]+)['"]/gmu)) { L1924: const rawModule = match[2];

Medium

Dynamic Require

Package source references dynamic require/import behavior.

providers/native/context-candidate-ast-code/src/index.mjsView on unpkg · L1922

scripts/rust-realworld-bench.mjsView file

66dir: 'kilo', L67: url: 'https://github.com/antirez/kilo.git', L68: question: { ... L77: function run(command, args, options = {}) { L78: const result = spawnSync(command, args, { L79: cwd: ROOT, ... L81: maxBuffer: 256 * 1024 * 1024, L82: env: { ...process.env, OAF_FIXED_NOW: FIXED_NOW }, L83: ...options

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

scripts/rust-realworld-bench.mjsView on unpkg · L66

MakefileView file

•path = Makefile kind = build_helper sizeBytes = 498 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

MakefileView on unpkg

scripts/consumer-browser-smoke.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = memory-recall@1.0.5 matchedIdentity = npm:bWVtb3J5LXJlY2FsbA:1.0.5 similarity = 0.677 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/consumer-browser-smoke.mjsView on unpkg

17patternName = generic_password severity = medium line = 17 matchedText = const pa...le';

Medium

Secret Pattern

Hardcoded password in scripts/consumer-browser-smoke.mjs

scripts/consumer-browser-smoke.mjsView on unpkg · L17

scripts/consumer-smoke.mjsView file

17patternName = generic_password severity = medium line = 17 matchedText = const pa...le';

Medium

Secret Pattern

Hardcoded password in scripts/consumer-smoke.mjs

scripts/consumer-smoke.mjsView on unpkg · L17

Findings

4 High9 Medium4 Low

HighChild Processscripts/rust-semantic-ri-quality.mjs

HighShell

HighSame File Env Network Executionscripts/rust-realworld-bench.mjs

HighPrevious Version Dangerous Deltascripts/consumer-browser-smoke.mjs

MediumSecret Patternscripts/native-smoke.mjs

MediumDynamic Requireproviders/native/context-candidate-ast-code/src/index.mjs

MediumNetwork

MediumEnvironment Vars

MediumShips Build HelperMakefile

MediumStructural Risk Force Deep Review

MediumSecret Patternscripts/native-smoke.mjs

MediumSecret Patternscripts/consumer-smoke.mjs

MediumSecret Patternscripts/consumer-browser-smoke.mjs

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

providers/native/context-candidate-ast-code/src/index.mjsView file

Lines 1902-1942javascript

1902 if (char === '{') delta += 1;

1903 else if (char === '}') delta -= 1;

1904 }

1905 return delta;

1906}

1907

1908function declarationEndLine(lines, startLine) {

1909 let depth = 0;

1910 let sawBrace = false;

1911 for (let index = startLine; index < lines.length; index += 1) {

1912 const delta = braceDelta(lines[index]);

1913 if (delta > 0 || (index === startLine && lines[index].includes('{'))) sawBrace = true;

1914 depth += delta;

1915 if (sawBrace && depth <= 0) return index;

1916 if (!sawBrace && /;\s*$/u.test(lines[index].trim())) return index;

1917 }

1918 return lines.length - 1;

1919}

1920

1921function importsFor(body) {

1922 const imports = [];

1923 for (const match of String(body ?? '').matchAll(/^\s*import(?!\s*['"])(?:\s+type)?\s+([\s\S]*?)\s+from\s+['"]([^'"]+)['"]/

1924 const rawModule = match[2];

Medium

Dynamic Require

Package source references dynamic require/import behavior.

providers/native/context-candidate-ast-code/src/index.mjsView on unpkg · L1922

1925 const module = sanitizeModuleSpecifier(rawModule);

1926 imports.push({

1927 module,

1928 rawModule,

1929 syntax: 'static',

1930 importHash: hashRef(rawModule),

1931 names: importedNames(match[1]),

1932 namespace: namespaceImportedName(match[1]),

1933 aliases: { ...importedAliases(match[1]), ...defaultImportedAliases(match[1], rawModule) }

1934 });

1935 }

1936 for (const line of body.split('\n')) {

1937 const trimmedLine = line.trim();

1938 const bareMatch = line.match(/^\s*import\s+['"]([^'"]+)['"]/u);

1939 const dynamicImportMatch = /^(?:\/[/*]|\*)/u.test(trimmedLine) ? null : line.match(/\bimport$\s*['"]([^'"]+)['"]\s*$/u);

1940 const requireMatch = line.match(/require$\s*['"]([^'"]+)['"]\s*$/u);

1941 const requireBinding = line.match(/\b(?:const|let|var)\s+(.+?)\s*=\s*require\(/u)?.[1]?.trim() ?? null;

1942 const requireName = requireBinding?.match(/^[A-Za-z_$][\w$]*$/u)?.[0] ?? null;

scripts/rust-realworld-bench.mjsView file

Lines 46-86javascript

46 question: {

47 id: 'express-router-middleware',

48 query: 'router middleware',

49 searchTerm: 'middleware',

50 expected: ['route:GET_middleware', 'module:examples_route_middleware_index']

51 }

52 },

53 {

54 label: 'sinatra/sinatra',

55 dir: 'sinatra',

56 url: 'https://github.com/sinatra/sinatra.git',

57 question: {

58 id: 'sinatra-base-route',

59 query: 'base route',

60 searchTerm: 'def route',

61 expected: ['method:Base_route', 'function:routes']

62 }

63 },

64 {

65 label: 'antirez/kilo',

66 dir: 'kilo',

67 url: 'https://github.com/antirez/kilo.git',

68 question: {

69 id: 'kilo-refresh-screen',

70 query: 'editor refresh screen',

71 searchTerm: 'editorRefreshScreen',

72 expected: ['function:editorRefreshScreen', 'function:abAppend']

73 }

74 }

75];

77function run(command, args, options = {}) {

78 const result = spawnSync(command, args, {

79 cwd: ROOT,

80 encoding: 'utf8',

81 maxBuffer: 256 * 1024 * 1024,

82 env: { ...process.env, OAF_FIXED_NOW: FIXED_NOW },

83 ...options

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

scripts/rust-realworld-bench.mjsView on unpkg · L66

84 });

85 assert.equal(result.status, options.expectedStatus ?? 0, `${command} ${args.join(' ')}\n${result.stderr || result.stdout}`);

86 return result;

scripts/consumer-browser-smoke.mjsView file

Lines 1-37javascript

1import { spawn, spawnSync } from 'node:child_process';

2import { createRequire } from 'node:module';

3import { mkdir, mkdtemp, rm, writeFile } from 'node:fs/promises';

4import http from 'node:http';

5import os from 'node:os';

6import path from 'node:path';

7import { once } from 'node:events';

9const require = createRequire(import.meta.url);

10const { chromium } = require('playwright');

12const root = process.cwd();

13const temp = await mkdtemp(path.join(os.tmpdir(), 'oaf-consumer-browser-'));

14const workspace = path.join(temp, 'workspace');

15const home = path.join(temp, 'home');

16const data = path.join(workspace, '.local');

17const password = 'correct horse battery staple';

Medium

Secret Pattern

Hardcoded password in scripts/consumer-browser-smoke.mjs

scripts/consumer-browser-smoke.mjsView on unpkg · L17

18const screenshots = path.join(root, '.scratch', 'ui-redesign');

19let server = null;

20let browser = null;

22try {

23 await mkdir(path.join(workspace, 'src'), { recursive: true });

24 await mkdir(home, { recursive: true });

25 await mkdir(screenshots, { recursive: true });

26 await writeFile(path.join(workspace, 'package.json'), JSON.stringify({ name: 'consumer-browser-target' }, null, 2));

27 await writeFile(path.join(workspace, 'AGENTS.md'), 'Use local context handoffs and proposal-gated memory.');

28 await writeFile(path.join(workspace, 'src', 'app.js'), 'export function launchSmoke(){ return "ready"; }\n');

29 await writeFile(path.join(workspace, 'src', 'huge.js'), Array.from({ length: 500 }, (_, index) => `export function helper${index}(){ return "local proof ${index}"; }`).join('\n'));

30 await mkdir(path.join(workspace, 'memory'), { recursive: true });

31 await writeFile(path.join(workspace, 'memory', 'status.md'), 'Decision: project:memory-recall release_status ready supersedes draft.');

32 await writeFile(path.join(workspace, '.gitignore'), '.local/\n');

33 runJson(process.execPath, ['apps/cli/oaf.mjs', 'memory', 'remember', '--root', workspace, '--sqlite', '.local/memory.sqlite', '--subject', 'project:memory-recall', '--predicate', 'release_status', '--object', 'draft', '--source', 'workspace://memory/status.md', '--format', 'json']);

34 runJson(process.execPath, ['apps/cli/oaf.mjs', 'memory', 'remember', '--root', workspace, '--sqlite', '.local/memory.sqlite', '--subject', 'project:memory-recall', '--predicate', 'release_status', '--object', 'ready', '--supersedes-subject', 'project:memory-recall', '--supersedes-predicate', 'release_status', '--source', 'workspace://memory/status.md', '--format', 'json']);

35 run('git', ['init'], workspace);

36 run('git', ['config', 'user.email', 'browser-smoke@example.invalid'], workspace);

37 run('git', ['config', 'user.name', 'Browser Smoke'], workspace);

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/consumer-browser-smoke.mjsView on unpkg

scripts/consumer-smoke.mjsView file

Lines 1-37javascript

1import { spawn, spawnSync } from 'node:child_process';

2import { mkdir, mkdtemp, rm, writeFile } from 'node:fs/promises';

3import http from 'node:http';

4import os from 'node:os';

5import path from 'node:path';

6import { once } from 'node:events';

7import recallMapSchema from '../packages/protocol/schemas/recall-map.schema.json' with { type: 'json' };

8import { validateJsonSchema } from '../packages/protocol/src/schema-validator.mjs';

10const root = process.cwd();

11const temp = await mkdtemp(path.join(os.tmpdir(), 'oaf-consumer-smoke-'));

12const workspace = path.join(temp, 'workspace');

13const home = path.join(temp, 'home');

14const data = path.join(temp, 'data');

15const packDirectory = path.join(temp, 'pack');

16const prefix = path.join(temp, 'prefix');

17const password = 'correct horse battery staple';

Medium

Secret Pattern

Hardcoded password in scripts/consumer-smoke.mjs

scripts/consumer-smoke.mjsView on unpkg · L17

18let server = null;

20try {

21 await mkdir(path.join(workspace, 'src'), { recursive: true });

22 await mkdir(home, { recursive: true });

23 await mkdir(packDirectory, { recursive: true });

24 await writeFile(path.join(workspace, 'package.json'), JSON.stringify({ name: 'consumer-smoke-target' }, null, 2));

25 await writeFile(path.join(workspace, 'AGENTS.md'), 'Use local context handoffs and proposal-gated memory.');

26 await writeFile(path.join(workspace, 'src', 'app.js'), 'export function launchSmoke(){ return "ready"; }\n');

28 const [pack] = runJson('npm', ['pack', '--pack-destination', packDirectory, '--json'], { cwd: root });

29 must(pack?.files?.some((file) => file.path === 'apps/cli/oaf.mjs'), 'package includes recall bin');

30 must(!pack?.files?.some((file) => file.path.startsWith('tests/')), 'package excludes checkout-only tests');

31 const tarball = path.join(packDirectory, pack.filename);

32 run('npm', ['install', '-g', '--prefix', prefix, tarball, '--ignore-scripts', '--no-audit', '--no-fund'], { cwd: root, env: { ...process.env, HOME: home } });

33 const recall = path.join(prefix, 'bin', 'recall');

34 const packageRoot = path.join(prefix, 'lib', 'node_modules', 'memory-recall');

35 const env = { ...process.env, HOME: home, PATH: `${path.join(prefix, 'bin')}${path.delimiter}${process.env.PATH}` };

37 const version = run(recall, ['--version'], { cwd: workspace, env });