
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
@memharness/core
Advanced tools
Bi-temporal, provenance-carrying memory primitive for AI agents. One SQLite file, zero LLM calls.
The TypeScript core of memharness: a bi-temporal, provenance-carrying memory primitive for AI agents. Schema, forward-only migrations, the write path, and recall ranking, over one SQLite file (better-sqlite3). No LLM, no network, no background daemon.
For the MCP server, see @memharness/mcp.
import { Memharness } from "@memharness/core";
const mem = Memharness.open(); // ~/.memharness/memory.db
const { id } = mem.remember({
subject: "user",
fact: "lives in Osaka",
sourceRef: "session-2026-06-09",
});
mem.revise({ oldFactId: id, newFact: "lives in Tokyo", validFrom: "2026-05-01" });
mem.recall({ query: "lives" }).facts[0].fact; // "lives in Tokyo"
mem.recall({ query: "lives", asOf: "2026-04-15" }); // belief as held then
mem.diff({ since: "2026-06-01" }); // learned / revised / retracted
mem.why(id); // provenance + revision chain
valid_from/valid_to (world time) are tracked separately
from tx_at (when the agent learned it). recall({ asOf }) is deterministic
and reproducible for any past instant.revise closes the old fact and links it
forward; forget tombstones. Rows are never deleted.Recall ranking is RRF over FTS5 BM25 (plus a vector rank when you supply a query vector), times confidence, times recency decay, scored entirely in SQL, with a substring fallback for partial words and typos.
The property suite checks that recall({ asOf: T }) equals a naive SQL-free
replay of the event log, probed at every event timestamp ±1ms, across 10,000
randomized cases.
Apache-2.0
FAQs
Bi-temporal, provenance-carrying memory primitive for AI agents. One SQLite file, zero LLM calls.
We found that @memharness/core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.