io.github.JubaKitiashvili/context-mem

What was checked

Plain notes from the hygiene checks.

• Permissions

  Concern

  can delete files.

  PERMISSION_DELETE_FILES

  benchmarks/lib/kernel-adapter.js, line 444

  try { fs.unlinkSync(this.dbPath); } catch {}

  benchmarks/lib/kernel-adapter.js, line 445

  try { fs.unlinkSync(this.dbPath + '-wal'); } catch {}

  benchmarks/lib/kernel-adapter.js, line 446

  try { fs.unlinkSync(this.dbPath + '-shm'); } catch {}

  Show more

  benchmarks/lib/real-kernel-bench.js, line 122

  try { fs.rmSync(vaultDir, { recursive: true, force: true }); } catch {}

  benchmarks/lib/real-kernel-bench.js, line 302

  try { fs.rmSync(this.tmpDir, { recursive: true, force: true }); } catch {}

  bin/update-check.js, line 107

  try { fs.unlinkSync(MARKER_FILE); } catch {}

  bin/update-check.js, line 108

  try { fs.unlinkSync(SNOOZE_FILE); } catch {} // Clear snooze on upgrade

  dashboard/server/index.js, line 31

  try { fs.unlinkSync(path.join(INSTANCES_DIR, file)); } catch {}

• Install and update

  Pass

  No install-time script found, and dependencies are pinned or absent.

• Network

  Concern

  can reach a host that is not written as a fixed address. can reach api.anthropic.com. The description does not name that host. can reach api.example.com. The description does not name that host. can reach api.openai.com. The description does not name that host. can reach api.sendgrid.com. The description does not name that host.

  NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST

  benchmarks/e2e-qa.js, line 52

  console.log(' curl -fsSL -o /tmp/longmemeval-data/longmemeval_s_cleaned.json \\');

  benchmarks/e2e-qa.js, line 163

  console.error(' curl -fsSL -o /tmp/longmemeval-data/longmemeval_s_cleaned.json \\');

  benchmarks/longmemeval.js, line 36

  console.log(' curl -fsSL -o /tmp/longmemeval-data/longmemeval_s_cleaned.json \\');

  Show more

  benchmarks/run-all.js, line 69

  console.log(' Download: curl -fsSL -o /tmp/longmemeval-data/longmemev

  hooks/context-mem-hook.js, line 72

  const req = http.request({

  src/cli/commands/serve.ts, line 254

  const res = await fetch(`http://localhost:${dashPort}/api/health`, {

  src/core/providers/claude-provider.ts, line 20

  const res = await fetch('https://api.anthropic.com/v1/messages', {

  src/core/providers/ollama-provider.ts, line 17

  const res = await fetch(`${this.endpoint}/api/tags`, { signal: AbortSignal.timeout(2000) });

  src/core/providers/ollama-provider.ts, line 28

  const res = await fetch(`${this.endpoint}/api/generate`, {

  docs/integrations/aider.md, line 91

  resp = requests.get("http://127.0.0.1:51894/api/search", params={"q": "recent context"})

  docs/integrations/aider.md, line 103

  requests.post("http://127.0.0.1:51894/api/observe", json={

• Secrets

  Concern

  reads a credential or environment file.

  SECRETS_ENV_READ SECRETS_PATH_DOTENV

  dashboard/server/queries.js, line 580

  result.available = !!process.env.ANTHROPIC_API_KEY;

  dashboard/server/queries.js, line 584

  result.available = !!process.env.OPENROUTER_API_KEY;

  src/core/topic-detector.ts, line 27

  { name: 'config', patterns: /\b(config|setting|environment|env|variable|dotenv|yaml|toml|json config|.env)\b/i },

  Show more

  src/core/llm-factory.ts, line 19

  const aKey = anthropicKey ?? process.env.ANTHROPIC_API_KEY ?? '';

  src/core/llm-factory.ts, line 20

  const oKey = openrouterKey ?? process.env.OPENROUTER_API_KEY ?? '';

  .gitignore, line 7

  .DS_Store

  docs/benchmarks/fixtures/build-output.txt, line 2

  - Environments: .env.local, .env.production

  docs/benchmarks/fixtures/context7-supabase-edge.md, line 187

  supabase functions serve hello-world --env-file .env.local

• Agent instructions

  Pass

  No instruction to ignore earlier instructions or to hide a step.

• Obfuscation

  Note

  a file was over the read cap and was not fully read. the file cap was reached before every file was read.

  OBFUSCATION_FILE_OVER_READ_CAP OBFUSCATION_FILE_CAP_REACHED

  benchmarks/results/e2e-qa-real-500q-FINAL.json, line 1

  {

  benchmarks/results/e2e-qa-real-500q-T5full.json, line 1

  {

  benchmarks/results/lme-full-2026-04-18-temporal-v3.json, line 1

  {

  Show more

  benchmarks/results/lme-full-2026-04-18.json, line 1

  {

  benchmarks/results/lme-real-full-2026-04-18.json, line 1

  {

  benchmarks/results/lme-real-nosynth-2026-04-18.json, line 1

  {

  benchmarks/results/locomo-full-2026-04-18.json, line 1

  {

  benchmarks/results/locomo_session_top10_2026-04-09.json, line 1

  {

• Licence

  Pass

  A licence file is present (LICENSE).

• Maintainer activity

  Pass

  The latest commit is within the last 365 days.

Get the full report on this tool, £49

Note

Hygiene check of commit 2a55af0a4bf3. can delete files. can reach a host that is not written as a fixed address. can reach api.anthropic.com. The description does not name that host. can reach api.example.com. The description does not name that host. can reach api.openai.com. The description does not name that host. can reach api.sendgrid.com. The description does not name that host. reads a credential or environment file. a file was over the read cap and was not fully read. the file cap was reached before every file was read.

Date and source

Date checked: 19 Oct 2026

Read how this letter is chosen