
Security News
npm Tooling Bug Incorrectly Marks One-Character Packages as Security Holders
npm confirmed a tooling bug incorrectly marked several one-character packages as security holders and said it was working on a rollback.
@opencode-manager/memory
Advanced tools
Memory management plugin for OpenCode that enables semantic search and persistent storage of project knowledge.
Memory management plugin for OpenCode that enables semantic search and persistent storage of project knowledge.
| Tool | Description |
|---|---|
memory-read | Search and retrieve project memories with semantic search |
memory-write | Store a new project memory |
memory-edit | Update an existing project memory |
memory-delete | Delete a project memory by ID |
memory-health | Health check or full reindex of the memory store |
Install the package from npm:
npm install @opencode-manager/memory
# or
pnpm add @opencode-manager/memory
During installation, the local embedding model (all-MiniLM-L6-v2) is downloaded automatically via the postinstall script.
Then configure opencode to load the plugin. In your opencode.json:
{
"plugin": "@opencode-manager/memory"
}
On first run, the plugin automatically copies the bundled config to your data directory:
~/.local/share/opencode/memory/config.json$XDG_DATA_HOME/opencode/memory/config.jsonYou can edit this file to customize settings. The file is created only if it doesn't already exist.
{
"embedding": {
"provider": "local",
"model": "all-MiniLM-L6-v2",
"dimensions": 384,
"baseUrl": "",
"apiKey": ""
},
"dataDir": "~/.local/share/opencode/memory",
"dedupThreshold": 0.9,
"logging": {
"enabled": false,
"file": "~/.local/share/opencode/memory/logs/memory.log"
}
}
embedding.provider - Embedding provider: "local", "openai", or "voyage"embedding.model - Model name
"all-MiniLM-L6-v2" (384d) or "nomic-embed-text-v1.5" (768d)"text-embedding-3-small" (1536d), "text-embedding-3-large" (3072d), or "text-embedding-ada-002" (1536d)"voyage-code-3" (1024d) or "voyage-2" (1536d)embedding.dimensions - Vector dimensions (optional, auto-detected for known models)embedding.apiKey - API key for openai/voyage providersembedding.baseUrl - Custom endpoint (optional, defaults to provider's official API)dataDir - Directory for SQLite database storage (default: "~/.local/share/opencode/memory")dedupThreshold - Similarity threshold for deduplication (0–1, default: 0.15, clamped to 0.05–0.40)logging.enabled - Enable file logging (default: false)logging.file - Log file path (default: "~/.local/share/opencode/memory/logs/memory.log")When enabled, logs are written to the specified file with timestamps. The log file has a 10MB size limit with automatic rotation.
pnpm build # Compile TypeScript to dist/
pnpm test # Run tests
pnpm typecheck # Type check without emitting
FAQs
AI-powered memory management plugin for OpenCode - semantic search and persistent knowledge storage
The npm package @opencode-manager/memory receives a total of 104 weekly downloads. As such, @opencode-manager/memory popularity was classified as not popular.
We found that @opencode-manager/memory demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
npm confirmed a tooling bug incorrectly marked several one-character packages as security holders and said it was working on a rollback.

Research
/Security News
Newer packages in this compromise use native extensions and .pth loaders to execute JavaScript stealers in developer environments.

Research
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.