
Security News
Rust 1.100 Will Add Dependency Cooldowns to Cargo
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.
The engine of your second brain: Markdown notes as database tables, for you and your agents.
The engine of your second brain: Markdown notes as database tables, for you and your AI agents.
A row is any note whose table property names a table; tables are defined in
Database/database.yaml. Every write is checked against its table, journaled and undoable.
Programs use its HTTP API or the datanotes/client library; agents use the separate MCP server
datanotes-mcp.
Documentation: datanotes.dev
Requires Node.js 20 or newer. Start the engine on a vault:
npx -y datanotes serve --vault /path/to/vault
It serves the HTTP API on http://127.0.0.1:27150 (routes under /datanotes/*, plus the
Local-REST-API-style /vault/* and /search/simple/), with the owner's token in
<vault>/.datanotes/service.json. From code:
import { DatanotesClient } from "datanotes/client";
const db = new DatanotesClient({ url: "http://127.0.0.1:27150", token });
const { value } = await db.call("select_rows", { table: "book", where: { pages: { gt: 300 } } });
AI agents connect through datanotes-mcp, the MCP
server of Datanotes, a separate package built on this API.
See SECURITY.md: how to report a vulnerability, what each credential may do, and which data leaves the machine (only what you turn on).
See CONTRIBUTING.md.
Apache License 2.0: see LICENSE and NOTICE. Copyright 2026 Davide Fornelli.
FAQs
The engine of your second brain: Markdown notes as database tables, for you and your agents.
The npm package datanotes receives a total of 0 weekly downloads. As such, datanotes popularity was classified as not popular.
We found that datanotes demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Rust 1.100 will add opt-in dependency cooldowns to Cargo, giving security scanners and maintainers time to catch malicious crate releases.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.

Security News
Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.