
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
@rockship/code-memory-mcp
Advanced tools
A powerful Model Context Protocol (MCP) server implementation for seamless code memory integration, enabling AI assistants to interact with code memory data
@rockship/code-memory-mcp is a Model Context Protocol (MCP) server that provides a powerful code‑memory integration layer for AI assistants. It enables AI agents to store, retrieve, and reason over project‑specific code artifacts, facilitating context‑aware interactions such as code search, documentation lookup, and automated refactoring.
The server is built with TypeScript and runs on Node.js. It leverages the @modelcontextprotocol/sdk to expose a set of handlers for:
stdio, sse, and HTTP.code-memory.json project file.# Install dependencies
pnpm install
# Build the project
pnpm run build
The entry point is the code-memory-mcp CLI. Choose a script to run:
# Run the default stdio server (recommended for local development)
pnpm start
# Run the Server‑Sent Events server
pnpm run start:sse
# Run the streamable HTTP server
pnpm run start:streamableHttp
You can also invoke a specific script directly:
node dist/index.js stdio # or sse, streamableHttp, init
src/
├─ adapters/ # Adapter layer for external clients
├─ interfaces/ # TypeScript interfaces for client & query contracts
├─ network/ # HTTP client implementation
├─ prompts/ # System prompts and instructions used by the AI
├─ server/ # Core server logic and handler registrations
│ ├─ handlers.ts # Main request handlers
│ ├─ resources.ts # Resource (file/memory) management
│ ├─ tools.ts # Tool registration for AI actions
│ └─ …
├─ utils/ # Helper utilities and constants
├─ cli.ts # CLI entry point for init script
├─ code-memory.ts # Server factory and configuration
├─ index.ts # Dynamic script loader
└─ sse.ts / stdio.ts # Transport implementations
The server reads its configuration from code-memory.json (generated on first run). Example:
{
"project_id": "73d22542-6ef2-47c7-9a1e-89f6b5ed55e7",
"project_name": "Code Memory MCP",
"repo_url": "git@github.com:Rockship-Team/code-memory-mcp.git",
"created_at": "2025-10-28T10:25:09.735230Z"
}
pnpm run watch recompiles on file changes.tests/ directory and run with your preferred test runner.pnpm run release (changesets) to publish a new version.MIT © Rockship
FAQs
A powerful Model Context Protocol (MCP) server implementation for seamless code memory integration, enabling AI assistants to interact with code memory data
We found that @rockship/code-memory-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.