
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
@nuzo/memory-core
Advanced tools
The host-neutral memory engine for Nuzo.
This package contains memory lifecycle behavior, policy checks, SQLite storage,
FTS recall, audit events, and portable import/export contracts. It is consumed
by @nuzo/memory.
SQLite FTS is the default retrieval path. The optional semantic contracts are inert unless a library caller supplies a provider, builds a derived sidecar, and explicitly requests semantic or hybrid retrieval. Canonical writes never invoke an embedding provider.
The benchmark-proven local provider uses an optional peer dependency so normal installs do not include an inference runtime or model:
npm install @nuzo/memory-core @huggingface/transformers@4.2.0
Model provisioning is a separate explicit operation. Provider creation and normal recall only accept the pinned, checksum-verified local model files and disable remote model loading.
Most users should install the CLI or a host plugin instead of depending on the core package directly.
Use @nuzo/memory-core when you are:
Use @nuzo/memory for local command-line workflows, Codex, Claude Code, and
other MCP-compatible hosts.
The root entrypoint is explicit and documented. See:
https://nuzo.com.br/spec/memory-core-api/
Stable public exports cover the memory service, canonical memory/export types, runtime config helpers, default policy, local secret scanner, and domain error class. Lower-level SQLite, port, migration, and optional semantic/local-model exports are supported for advanced or experimental integrations as documented there.
Expected domain failures throw NuzoMemoryError. Use its code for
machine-readable handling; message is for humans, and details may be absent
where exposing details would leak unauthorized memory metadata.
Nuzo is intentionally local-first. SQLite is part of the product boundary, not a placeholder for a required cloud database.
By default, Nuzo should not:
Documentation: https://nuzo.com.br/
License: Apache-2.0
FAQs
Core memory lifecycle, ports, and domain contracts for Nuzo.
The npm package @nuzo/memory-core receives a total of 11 weekly downloads. As such, @nuzo/memory-core popularity was classified as not popular.
We found that @nuzo/memory-core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.