memwarden: Suspicious npm security report (Warn) | LPM Firewall

Loading npm security reports…

memwarden: Suspicious npm security report (Warn) | LPM Firewall

Source & flagged code

4 flagged

dist/embedding/runtime.jsView file

Lines 1-72javascript

1//

2// Semantic runtime: makes local embeddings work after a normal install.

3//

4// '@huggingface/transformers' is deliberately NOT a dependency of the npm

5// package — it would turn a 28MB install into a ~250MB one and slow the

6// `npx memwarden audit` funnel to a crawl. Instead `memwarden up` installs

7// it ONCE into <dataDir>/runtime (npm --prefix), and the embedding loader

8// falls back to that location when the bare specifier doesn't resolve.

9// Everything stays honest: if neither resolves, the daemon says

10// "lexical-only" instead of silently degrading.

11import { existsSync, readFileSync } from "node:fs";

12import { spawnSync } from "node:child_process";

13import { join } from "node:path";

High

Child Process

Package source references child process execution.

dist/embedding/runtime.jsView on unpkg · L11

14import { homedir } from "node:os";

15import { pathToFileURL } from "node:url";

16const PKG = "@huggingface/transformers";

17const PKG_SPEC = "@huggingface/transformers@^3.8.1";

18/** Where `memwarden up` installs the optional embedding runtime. */

19export function semanticRuntimeRoot(dataDir) {

20 const base = dataDir ?? process.env.MEMWARDEN_DATA_DIR ?? join(homedir(), ".memwarden");

21 return join(base, "runtime");

22}

23/**

24 * Locate the transformers.js Node ESM entry inside a runtime root, without

25 * going through the exports map (package.json isn't an exported subpath).

26 * Returns an absolute file path, or null when not installed there.

27 */

28export function resolveTransformersEntry(root) {

29 const pkgDir = join(root, "node_modules", "@huggingface", "transformers");

30 const pkgJsonPath = join(pkgDir, "package.json");

31 if (!existsSync(pkgJsonPath))

32 return null;

33 try {

34 const pkg = JSON.parse(readFileSync(pkgJsonPath, "utf8"));

35 const rel = pkg.exports?.node?.import?.default ?? pkg.module ?? pkg.main ?? null;

36 if (!rel)

37 return null;

38 const entry = join(pkgDir, rel);

39 return existsSync(entry) ? entry : null;

40 }

41 catch {

42 return null;

43 }

44}

45/**

46 * Import transformers.js: bare specifier first (dev checkouts, users who

47 * installed it themselves), then the memwarden runtime dir. Throws with an

48 * actionable message when neither resolves.

49 */

50export async function importTransformers() {

51 const specifier = PKG;

52 try {

53 return (await import(specifier));

54 }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/embedding/runtime.jsView on unpkg · L52

55 catch {

56 // fall through to the runtime root

57 }

58 const entry = resolveTransformersEntry(semanticRuntimeRoot());

59 if (entry) {

60 const mod = (await import(pathToFileURL(entry).href));

61 // Tolerate CJS/ESM interop: pipeline may sit on the default export.

62 if (typeof mod.pipeline === "function")

63 return mod;

64 if (typeof mod.default?.pipeline === "function")

65 return mod.default;

66 return mod;

67 }

68 throw new Error(`Local embeddings require '${PKG}'. Run 'memwarden up' to install it ` +

69 `into ${semanticRuntimeRoot()}, or: npm install ${PKG}`);

70}

71/**

72 * Install the embedding runtime under <dataDir>/runtime via npm --prefix.

dist/daemon/service.jsView file

Lines 1-33javascript

1//

2// OS service installer — the crash/reboot self-heal. Registers the daemon

3// with the platform supervisor so it starts at login and restarts if it

4// dies, with no human in the loop:

5// macOS ~/Library/LaunchAgents/ai.memwarden.daemon.plist (launchd)

6// Linux ~/.config/systemd/user/memwarden.service (systemd --user)

7//

8// KeepAlive/Restart are set to "restart on FAILURE only" (SuccessfulExit

9// false / on-failure). That pairs with the daemon's clean exit(0) on

10// EADDRINUSE: if another instance already holds the port, the supervised one

dist/daemon/ensure.jsView file

Lines 1-27javascript

1//

2// Daemon lifecycle — the self-healing core. ensureDaemon makes the daemon

3// reachable: if it isn't, spawn it detached (so it outlives the caller's

4// shell) pointed at a stable global brain, and wait for it to answer. Shared

5// by the CLI (`memwarden up`) and the MCP server (which revives a dead daemon

6// on demand), so any entry point can bring the brain back with no human in

7// the loop.

8import { spawn } from "node:child_process";

9