registry / neuromcp / 0.28.0

neuromcp@0.28.0

Semantic memory for AI agents — local-first MCP server with hybrid search, governance, and consolidation

Static Scan Results

scanned 5d ago · by rust-scanner

Static analysis flagged 17 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

CopyleftLicense

scanned 98 file(s), 561 KB of source, external domains: 127.0.0.1, api.openai.com, claude.com, github.com, huggingface.co, ollama.com

Source & flagged code

8 flagged

package.jsonView file

Lines 73-113json

73 "neuromcp-enable-zombie-cleanup": "bin/enable-zombie-cleanup.mjs",

74 "neuromcp-enable-daemon": "bin/enable-daemon.mjs",

75 "neuromcp-connect": "bin/neuromcp-connect.mjs",

76 "neuromcp-index-wiki": "scripts/index-wiki.mjs",

77 "neuromcp-backfill-embeddings": "scripts/backfill-embeddings.mjs",

78 "neuromcp-query": "bin/query.mjs",

79 "neuromcp-embed": "bin/embed.mjs",

80 "neuromcp-doctor": "bin/doctor.mjs"

81 },

82 "scripts": {

83 "build": "tsup",

84 "dev": "tsx src/index.ts",

85 "test": "vitest run",

86 "test:watch": "vitest",

87 "test:coverage": "vitest run --coverage",

88 "lint": "eslint src/ && tsc --noEmit",

89 "docs:tools": "tsx scripts/generate-tools-doc.ts",

90 "docs:tools:check": "tsx scripts/generate-tools-doc.ts --check",

91 "eval": "tsx eval/runner.ts",

92 "eval:baseline": "tsx eval/runner.ts --update-baseline",

93 "postinstall": "node scripts/download-model.mjs || true"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L93

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L93

94 },

95 "keywords": [

96 "mcp",

97 "memory",

98 "ai",

99 "semantic-search",

100 "vector",

101 "sqlite",

102 "claude",

103 "cursor"

104 ],

105 "author": "AdelElo13",

106 "license": "AGPL-3.0-only",

107 "engines": {

108 "node": ">=20"

109 },

110 "dependencies": {

111 "@modelcontextprotocol/sdk": "^1.29.0",

112 "better-sqlite3": "^12.9.0",

113 "onnxruntime-node": "^1.18.0",

bin/init-wiki.mjsView file

Lines 1-41javascript

1#!/usr/bin/env node

2/**

3 * neuromcp init-wiki — Initialize the wiki knowledge base

4 *

5 * Creates:

6 * ~/.neuromcp/wiki/ (git-tracked compiled knowledge)

7 * ~/.neuromcp/raw/sessions/ (raw session logs)

8 *

9 * Copies template files and initializes git.

10 * Installs hooks (Claude Code) and rules (other editors).

11 * Safe to run multiple times — won't overwrite existing files.

12 *

bin/dedup-entity-names.mjsView file

Lines 1-39javascript

1#!/usr/bin/env node

2/**

3 * neuromcp-dedup-entity-names — one-time merge of duplicate entity rows that

4 * accumulated under the pre-v0.26 (name, entity_type, namespace) upsert key.

5 *

6 * DESTRUCTIVE (losers are soft-deleted, links re-pointed). Defaults to

7 * dry-run: it prints the merge plan and exits. Re-run with --apply to

8 * execute. Always review the dry-run output first.

9 *

10 * Usage:

11 * npx neuromcp-dedup-entity-names # dry-run (plan only)

bin/enable-daemon.mjsView file

Lines 1-26javascript

1#!/usr/bin/env node

2/**

3 * neuromcp enable-daemon — install (or uninstall) the launchd agent that

4 * runs `neuromcp-daemon` as a long-lived background process.

5 *

6 * Goal: a single neuromcp daemon serves ALL MCP-capable clients on this

7 * Mac via HTTP Streamable transport on http://127.0.0.1:<PORT>/mcp.

8 * No more "each client spawns its own stdio neuromcp instance" — no more

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

bin/enable-daemon.mjsView on unpkg · L6

9 * port conflicts, one shared DB, one embedding pipeline.

templates/hooks/neuromcp-critic.cjsView file

Lines 9-49javascript

9 * TIER 1 (default when Ollama is running): semantic judge. For each

10 * uncritiqued retrieval event, call the local Ollama chat model with

11 * (query, retrieved memories, session assistant replies) and let it

12 * emit a strict JSON verdict per memory. This captures paraphrase and

13 * concept reuse that pattern-matching misses.

scripts/launcher.shView file

•path = scripts/launcher.sh kind = build_helper sizeBytes = 4034 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/launcher.shView on unpkg

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/download-model.mjs || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/download-model.mjs || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/init-wiki.mjsView file

21import { homedir, platform } from 'node:os'; L22: import { execFileSync } from 'node:child_process'; L23: import { fileURLToPath } from 'node:url';

High

Child Process

Package source references child process execution.

bin/init-wiki.mjsView on unpkg · L21

13* Usage: L14: * npx neuromcp-init-wiki # auto-detect editors L15: * npx neuromcp-init-wiki --editor cursor # explicit editor ... L21: import { homedir, platform } from 'node:os'; L22: import { execFileSync } from 'node:child_process'; L23: import { fileURLToPath } from 'node:url';

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/init-wiki.mjsView on unpkg · L13

bin/dedup-entity-names.mjsView file

19const __dirname = dirname(fileURLToPath(import.meta.url)); L20: const { openDatabase, closeDatabase } = await import( L21: resolve(__dirname, '..', 'dist', 'storage', 'database.js')

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/dedup-entity-names.mjsView on unpkg · L19

bin/enable-daemon.mjsView file

6* Goal: a single neuromcp daemon serves ALL MCP-capable clients on this L7: * Mac via HTTP Streamable transport on http://127.0.0.1:<PORT>/mcp. L8: * No more "each client spawns its own stdio neuromcp instance" — no more ... L37: import { homedir, platform } from 'node:os'; L38: import { execFileSync } from 'node:child_process'; L39: import { fileURLToPath } from 'node:url'; ... L41: L42: const __dirname = dirname(fileURLToPath(import.meta.url)); L43: const HOME = homedir(); ... L63: '/npm-cache/', L64: '/private/tmp/', // macOS tmp L65: '/var/folders/', // macOS user tmp

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

bin/enable-daemon.mjsView on unpkg · L6

templates/hooks/neuromcp-critic.cjsView file

29const path = require('node:path'); L30: const http = require('node:http'); L31: const { spawnSync } = require('node:child_process'); L32: const crypto = require('node:crypto'); ... L34: const HOME = os.homedir(); L35: const DB_PATH = process.env.NEUROMCP_DB || path.join(HOME, '.neuromcp', 'memory.db'); L36: const LOG_PATH = path.join(HOME, '.neuromcp', 'critic.log');

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

templates/hooks/neuromcp-critic.cjsView on unpkg · L29

scripts/launcher.shView file

•path = scripts/launcher.sh kind = build_helper sizeBytes = 4034 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/launcher.shView on unpkg

Findings

5 High7 Medium5 Low

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processbin/init-wiki.mjs

HighShell

HighSame File Env Network Executiontemplates/hooks/neuromcp-critic.cjs

HighRuntime Package Installbin/init-wiki.mjs

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requirebin/dedup-entity-names.mjs

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencebin/enable-daemon.mjs

MediumShips Build Helperscripts/launcher.sh

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowCopyleft License

Source & flagged code

8 flagged

package.jsonView file

Lines 73-113json

73 "neuromcp-enable-zombie-cleanup": "bin/enable-zombie-cleanup.mjs",

74 "neuromcp-enable-daemon": "bin/enable-daemon.mjs",

75 "neuromcp-connect": "bin/neuromcp-connect.mjs",

76 "neuromcp-index-wiki": "scripts/index-wiki.mjs",

77 "neuromcp-backfill-embeddings": "scripts/backfill-embeddings.mjs",

78 "neuromcp-query": "bin/query.mjs",

79 "neuromcp-embed": "bin/embed.mjs",

80 "neuromcp-doctor": "bin/doctor.mjs"

81 },

82 "scripts": {

83 "build": "tsup",

84 "dev": "tsx src/index.ts",

85 "test": "vitest run",

86 "test:watch": "vitest",

87 "test:coverage": "vitest run --coverage",

88 "lint": "eslint src/ && tsc --noEmit",

89 "docs:tools": "tsx scripts/generate-tools-doc.ts",

90 "docs:tools:check": "tsx scripts/generate-tools-doc.ts --check",

91 "eval": "tsx eval/runner.ts",

92 "eval:baseline": "tsx eval/runner.ts --update-baseline",

93 "postinstall": "node scripts/download-model.mjs || true"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L93

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L93

94 },

95 "keywords": [

96 "mcp",

97 "memory",

98 "ai",

99 "semantic-search",

100 "vector",

101 "sqlite",

102 "claude",

103 "cursor"

104 ],

105 "author": "AdelElo13",

106 "license": "AGPL-3.0-only",

107 "engines": {

108 "node": ">=20"

109 },

110 "dependencies": {

111 "@modelcontextprotocol/sdk": "^1.29.0",

112 "better-sqlite3": "^12.9.0",

113 "onnxruntime-node": "^1.18.0",

bin/init-wiki.mjsView file

Lines 1-41javascript

1#!/usr/bin/env node

2/**

3 * neuromcp init-wiki — Initialize the wiki knowledge base

4 *

5 * Creates:

6 * ~/.neuromcp/wiki/ (git-tracked compiled knowledge)

7 * ~/.neuromcp/raw/sessions/ (raw session logs)

8 *

9 * Copies template files and initializes git.

10 * Installs hooks (Claude Code) and rules (other editors).

11 * Safe to run multiple times — won't overwrite existing files.

12 *

bin/dedup-entity-names.mjsView file

Lines 1-39javascript

1#!/usr/bin/env node

2/**

3 * neuromcp-dedup-entity-names — one-time merge of duplicate entity rows that

4 * accumulated under the pre-v0.26 (name, entity_type, namespace) upsert key.

5 *

6 * DESTRUCTIVE (losers are soft-deleted, links re-pointed). Defaults to

7 * dry-run: it prints the merge plan and exits. Re-run with --apply to

8 * execute. Always review the dry-run output first.

9 *

10 * Usage:

11 * npx neuromcp-dedup-entity-names # dry-run (plan only)

bin/enable-daemon.mjsView file

Lines 1-26javascript

1#!/usr/bin/env node

2/**

3 * neuromcp enable-daemon — install (or uninstall) the launchd agent that

4 * runs `neuromcp-daemon` as a long-lived background process.

5 *

6 * Goal: a single neuromcp daemon serves ALL MCP-capable clients on this

7 * Mac via HTTP Streamable transport on http://127.0.0.1:<PORT>/mcp.

8 * No more "each client spawns its own stdio neuromcp instance" — no more

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

bin/enable-daemon.mjsView on unpkg · L6

9 * port conflicts, one shared DB, one embedding pipeline.

templates/hooks/neuromcp-critic.cjsView file

Lines 9-49javascript

9 * TIER 1 (default when Ollama is running): semantic judge. For each

10 * uncritiqued retrieval event, call the local Ollama chat model with

11 * (query, retrieved memories, session assistant replies) and let it

12 * emit a strict JSON verdict per memory. This captures paraphrase and

13 * concept reuse that pattern-matching misses.

scripts/launcher.shView file

•path = scripts/launcher.sh kind = build_helper sizeBytes = 4034 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/launcher.shView on unpkg