mirror of https://github.com/DeusData/codebase-memory-mcp.git synced 2026-11-07 08:43:35 +08:00

Files

T

Martin Vogel 3f99b2ddd3 build(pypi): bump urllib3 to 2.8.0 in the publish toolchain pins

urllib3 2.7.0, pinned in pkg/pypi/requirements-publish.txt for the
PyPI publish step, is affected by three advisories published on
2026-09-30, all fixed in 2.8.0:
- GHSA-8988-9cw3-xx77 (high): HTTPS proxy TLS configuration may be
  ignored or overridden
- GHSA-vxq7-64xx-v4gw (high): unbounded chunk-size line buffering in
  HTTPResponse.stream() / read_chunked()
- GHSA-gh4c-6fx4-qh6g (medium): chunked deflate streaming can loop
  forever

OSSF Scorecard reports them as code-scanning alert #33
(VulnerabilitiesID), which the CodeQL gate counts as an open alert,
so every PR's gate is blocked until the pin moves.

Only urllib3 changes. The file was regenerated with the documented
recipe (pip-compile 7.5.1 on a linux/amd64 python:3.12 image) in
upgrade-only mode (--upgrade-package urllib3==2.8.0), so every other
pin and hash is byte-identical. Both new hashes match PyPI's published
digests for urllib3-2.8.0-py3-none-any.whl and urllib3-2.8.0.tar.gz.

Proof: `pip install --require-hashes --no-deps -r
requirements-publish.txt` on linux/amd64 python:3.12 installs the full
set with every hash verified, imports urllib3 2.8.0, twine and build,
and `pip check` reports no broken requirements.

Signed-off-by: Martin Vogel <martin.vogel.tech@gmail.com>

2026-09-30 22:55:43 +02:00

src/codebase_memory_mcp

chore(pkg): sync packaging metadata to v0.11.0

2026-09-16 01:45:40 +02:00

tests

test(pypi): restore the publication concurrency tests for the single-file runtime

2026-08-09 20:21:39 +02:00

pyproject.toml

chore(pkg): sync packaging metadata to v0.11.0

2026-09-16 01:45:40 +02:00

README.md

fix(install,daemon): unbreak npx clients, group-writable homes, and legacy updaters

2026-08-11 13:37:32 +02:00

requirements-publish.txt

build(pypi): bump urllib3 to 2.8.0 in the publish toolchain pins

2026-09-30 22:55:43 +02:00

README.md

codebase-memory-mcp

mcp-name: io.github.DeusData/codebase-memory-mcp

Fast code intelligence engine for AI coding agents. Indexes an average repository in milliseconds, the Linux kernel (28M LOC) in 3 minutes. Answers structural queries in under 1ms.

This Python wrapper downloads the selected codebase-memory-mcp runtime set from GitHub Releases on first run and verifies it before publishing it in your OS cache directory. The set contains the native executable and authenticated integration asset, with the graph UI always embedded.

Installation

pip install codebase-memory-mcp
# or
pipx install codebase-memory-mcp

There is one composition per platform: the graph UI ships in every build, so no variant selection is needed.

Usage

codebase-memory-mcp install   # configure your coding agents
codebase-memory-mcp --help

Supported platforms

OS	Architecture
macOS	arm64, amd64
Linux	arm64, amd64
Windows	arm64, amd64

Full documentation

See github.com/DeusData/codebase-memory-mcp