
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
@nuzo/memory
Advanced tools
Unified Nuzo package for local memory, MCP server integration, and host lifecycle hooks.
The official Nuzo package for local agent memory.
It installs the CLI, MCP server, and host lifecycle hook runner.
npm install --global @nuzo/memory
The npm package is the runtime. Codex, Claude Code, and other MCP hosts still need Nuzo configured as a plugin or MCP server.
npm exec --yes --package=@nuzo/memory -- nuzo-mcp-server
Generated Nuzo plugins also use:
npm exec --yes --package=@nuzo/memory -- nuzo-memory-hook --doctor
Use the CLI to inspect and maintain local memory:
nuzo memory init
nuzo memory doctor
nuzo memory list
nuzo memory recall "deployment preferences"
| Binary | Purpose |
|---|---|
nuzo | Local memory control. |
nuzo-mcp-server | MCP server for agent hosts. |
nuzo-memory-hook | Read-only host recall hook. |
Runtime memory is stored locally under:
~/.nuzo/memory/
No telemetry, sync, embeddings, or network calls are enabled by default.
Optional local hybrid retrieval is available without changing that default.
Install @huggingface/transformers@4.2.0 alongside Nuzo, explicitly provision
the pinned model, and rebuild the disposable semantic sidecar. See
https://nuzo.com.br/operations/optional-semantics/.
Use @nuzo/memory-core only for library-level integrations.
Documentation: https://nuzo.com.br/
License: Apache-2.0
FAQs
Unified Nuzo package for local memory, MCP server integration, and host lifecycle hooks.
The npm package @nuzo/memory receives a total of 1 weekly downloads. As such, @nuzo/memory popularity was classified as not popular.
We found that @nuzo/memory demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.