{
  "slug": "io-github-28naem-del-mnemosyne",
  "name": "Mnemosyne",
  "auditedAt": "2026-11-02T12:22:33Z",
  "version": "3.0.0-rc.4",
  "ecosystem": "npm",
  "package": "mnemosy-ai",
  "disclaimer": "Automated smoke test, not a security guarantee.",
  "complete": true,
  "checks": {
    "versionPin": {
      "status": "pass",
      "detail": "Pinned npm mnemosy-ai@3.0.0-rc.4",
      "version": "3.0.0-rc.4"
    },
    "vulnerabilities": {
      "status": "pass",
      "detail": "No critical, high, or medium advisories were returned.",
      "critical": 0,
      "high": 0,
      "medium": 0,
      "low": 0,
      "packagesScanned": 32
    },
    "license": {
      "status": "pass",
      "detail": "MIT",
      "spdx": "MIT"
    },
    "installScripts": {
      "status": "pass",
      "detail": "No preinstall, install, postinstall, or prepare script.",
      "scripts": []
    },
    "secrets": {
      "status": "pass",
      "detail": "No credential patterns in the published artifact.",
      "findings": []
    },
    "packageSize": {
      "status": "pass",
      "detail": "6221212 bytes",
      "bytes": 6221212
    },
    "activity": {
      "status": "pass",
      "detail": "Active 4 days ago.",
      "ageDays": 4
    },
    "sandbox": {
      "status": "pass",
      "detail": "MCP handshake completed. 16 tools listed. Started with placeholder configuration values, not real credentials.",
      "starts": true,
      "handshake": true,
      "timeToReadyMs": 212,
      "tools": [
        {
          "name": "memory_recall",
          "description": "Find scoped memories with this memory's configured retrieval (by default hybrid when the local embedding model is available, otherwise lexical). Corrections and provenance restrictions apply to every result."
        },
        {
          "name": "memory_context",
          "description": "Compile cited, scoped context with contradictions and abstention under a conservative byte-based token budget. Pass only packet.text as context; diagnostics are outside the budget."
        },
        {
          "name": "memory_inspect",
          "description": "Inspect accessible stored evidence and its lifecycle. Inactive records are history, not current advice."
        },
        {
          "name": "memory_resume",
          "description": "Read the latest accessible active checkpoint for a task. Completed steps and artifact paths are historical claims. Verify current environment and permissions before acting."
        },
        {
          "name": "memory_source",
          "description": "Read a bounded UTF-8 range of the original captured transcript or extracted document. Its status and trust remain visible."
        },
        {
          "name": "memory_model",
          "description": "Inspect a source-backed project model. Stale models are marked and must not be treated as current knowledge."
        },
        {
          "name": "memory_skill",
          "description": "Inspect a reusable skill and its prerequisites, trial evidence and current eligibility. This does not execute the skill."
        },
        {
          "name": "memory_jobs",
          "description": "Inspect bounded observation/consolidation jobs and their outcome. Only the host executes configured model workers."
        },
        {
          "name": "memory_entity",
          "description": "Resolve an entity name or alias without silently merging ambiguous identities."
        },
        {
          "name": "memory_traverse",
          "description": "Follow a bounded number of evidence-backed relationship hops; each hop retains source IDs."
        },
        {
          "name": "memory_branch_preview",
          "description": "Inspect isolated proposed changes and source conflicts before a controller merges them."
        },
        {
          "name": "memory_store",
          "description": "Record an observed fact, preference, decision or procedure with a source. Private by default; workspace visibility explicitly shares with this workspace. Agent notes cannot self-certify as verified. Similar text is never automatically merge"
        },
        {
          "name": "memory_capture",
          "description": "Capture supplied transcript events with stable retry IDs. This reads no host files. Observed messages remain fallible evidence."
        },
        {
          "name": "memory_observe",
          "description": "Queue source-linked observations or a project model for the host to process under its configured model and budget. This does not invoke or choose a model."
        },
        {
          "name": "memory_checkpoint",
          "description": "Save a resumable task state, preserving constraints, rejected approaches and unfinished work. It does not perform or authorize actions."
        },
        {
          "name": "memory_correct",
          "description": "Explicitly supersede your own non-verified observation; dependent advice becomes invalid. Controller-verified evidence must be corrected through the controller SDK."
        }
      ],
      "toolCount": 16,
      "resourceCount": 0,
      "promptCount": 0,
      "stderrExcerpt": "(node:723778) ExperimentalWarning: SQLite is an experimental feature and might change at any time\n(Use `node --trace-warnings ...` to show where the warning was created)",
      "network": "disabled",
      "networkAttemptedWhileOffline": false,
      "outboundHosts": [],
      "requiresCredentials": false,
      "placeholderConfig": [
        "command-line arguments"
      ]
    }
  },
  "tier": "gold",
  "tierReason": "Sandbox handshake completed and the published checks passed.",
  "logExcerpt": "(node:723778) ExperimentalWarning: SQLite is an experimental feature and might change at any time\n(Use `node --trace-warnings ...` to show where the warning was created)"
}