{"name":"io.github.AVIDS2/memorix","slug":"avids2-memorix","title":"Memorix","description":"Local-first project memory with legacy MCP and 2026 discovery compatibility.","url":"https://mcp.market/server/avids2-memorix","rating":null,"grade":"C","score":66,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":67,"stars":785,"forks":66,"downloads_week":15708,"last_push_at":"2026-09-18T04:19:01.000Z","license":"Apache-2.0"},"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/AVIDS2/memorix","website":"https://mem.rglens.com","version":"1.9.4","remotes":[],"packages":[{"registryType":"npm","identifier":"memorix","version":"1.9.4","runtimeHint":"npx","transport":{"type":"stdio"},"packageArguments":[{"value":"serve","type":"positional"}]}],"tools":[],"scan":{"score":66,"grade":"C","scanned_at":"2026-09-19T00:31:35.001Z","report":{"scannerVersion":"0.1.3","scannedAt":"2026-09-19T00:31:34.948Z","components":{"code":{"score":8,"max":25,"notes":["399 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 1 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"net.raw-ip","severity":"medium","component":"code","title":"Network call to a raw IP address","evidence":"src/cli/commands/background.ts: … port: 3211, dashboard: 'http://127.0.0.1:3211/', mcp: 'http://127.0.0.1:3211…"},{"id":"exec.shell-concat","severity":"high","component":"code","title":"Shell command built from a string (injection risk)","evidence":"src/cli/tui/App.tsx: …ckground.dashboard) { try { execSync(`start \"\" \"${background.dashboard}\"`, { stdio: 'pipe'…"}],"inputs":{"packages":[{"registryType":"npm","identifier":"memorix","version":"1.9.4","found":true,"license":"Apache-2.0","hasInstallScripts":false,"dependencyCount":18,"publishedAt":"2026-09-18T04:38:40.434Z","repositoryUrl":"git+https://github.com/AVIDS2/memorix.git","weeklyDownloads":15708}],"repo":{"found":true,"owner":"AVIDS2","repo":"memorix","archived":false,"pushedAt":"2026-09-18T04:19:01Z","stars":785,"forks":66,"openIssues":9,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/172191005?v=4","ownerCreatedAt":"2024-06-09T13:21:17Z","license":"Apache-2.0"},"icon":{"url":"https://raw.githubusercontent.com/AVIDS2/memorix/main/assets/logo.png","source":"registry","width":1024,"height":1024},"presence":{"stars":785,"forks":66,"downloadsWeek":15708,"license":"Apache-2.0","lastPushAt":"2026-09-18T04:19:01.000Z","score":67}}}},"grade_history":[{"kind":"downgrade","fromGrade":"B","toGrade":"C","reason":"score 66: Shell command built from a string (injection risk); Network call to a raw IP address","createdAt":"2026-09-19T00:31:35.745Z"}],"reviews":[]}