
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
Zero-model recall over your files: the exact section that answers a question, in about a millisecond. CLI and MCP server for Claude Code.
Zero-model recall over your files. Ask a question, get back the exact section that answers it and the file it came from, in about a millisecond, without calling a model. Built for Claude Code: as an MCP server it replaces grep-and-read-whole-files with one call, using far fewer tokens.
The retrieval engine inside Laika Orbit, published on npm as laikaorbit.
claude mcp add laikaorbit -- npx -y laikaorbit mcp
Claude Code starts the server in your project folder and gets three tools: recall (answer a
question with the matching section and its source), get (read a file) and status. To point it
at another folder, add --root <dir> after mcp.
npx laikaorbit index # build the index for this folder
npx laikaorbit recall "how do we roll back a deploy"
npx laikaorbit lint # check router files for dangling pointers
npx laikaorbit ask "…" # print the packed prompt for a model
Every command takes --root <dir>; otherwise the corpus is BRAIN_ROOT, then the working directory.
Seven steps, none of them a model call: tokenise the question on word boundaries, score it against
an inverted index, keep the top five with a confidence margin, open only the winner, slice out the
matching ## section, follow at most one pointer, and pack the result.
It works on any folder of Markdown and text. It works best with router files: short typed
pointer lists in brain/routers/*.md that say where things are, written the way questions are
asked:
## 1 — deploys
- Files: notes/deploy.md — how production deploys are rolled back
- Rules: notes/freeze.md — no deploys on Fridays after 2pm
Which folders are indexed, and how, is set in brain/index.config.json (optional). .docx, .rtf
and .odt are read with macOS textutil, and PDFs with pdftotext when it's installed.
Node 22 or newer. Nothing leaves your machine: it reads local files and makes no network calls.
MIT © Laika Dynamics Limited
FAQs
Zero-model recall over your files: the exact section that answers a question, in about a millisecond. CLI and MCP server for Claude Code.
The npm package laikaorbit receives a total of 455 weekly downloads. As such, laikaorbit popularity was classified as not popular.
We found that laikaorbit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.