
Research
/Security News
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.
换个模型,AI 就把用户忘光了。MemoWeft 给 AI 助手一块带得走的长期记忆——而且不把猜的当真的。Long-term memory for AI assistants: portable across models, and it keeps facts and guesses apart.
Portable memory for AI apps — facts, guesses, conflicts, and stale states kept apart.
Why · Install · Reference host · Docs
English · 简体中文

MemoWeft is a library you import into an AI app. It keeps portable, traceable long-term memory about a user — separating facts from guesses, exposing conflicts instead of silently overwriting them, and letting different hosts reuse the same memory.
These three, plus typed decay, traceability, and no self-corroboration, make six cognitive disciplines — all backed by numbered eval cases in tests/eval/ (npm test).
npm install memoweft # Node 24: built-in node:sqlite. Node 20/22: also `npm i better-sqlite3`
import { createMemoWeftCore } from 'memoweft';
// No API key, no network — an in-memory db and the public API.
const core = createMemoWeftCore({ dbPath: ':memory:' });
await core.ingestUserMessage({ subjectId: 'user-42', content: 'I only drink decaf after 3pm — caffeine wrecks my sleep.' });
for (const e of core.memory.listEvidence({ subjectId: 'user-42' }))
console.log(e.sourceKind, '·', e.rawContent); // → spoken · I only drink decaf after 3pm — caffeine wrecks my sleep.
core.close();
That stored one piece of evidence — no key needed. Turning evidence into a recalled profile (distilling facts, exposing conflicts) needs a chat model: see Getting started. No key handy? examples/no-key-demo.ts shows a conflict exposed against an offline stub in ~30 seconds.
The bundled reference host is a demo, not the product. It shows how an app uses Core — chat with recall, watch memory form, and inspect the evidence → event → cognition graph. Needs Node 24+.
git clone https://github.com/memoweft/memoweft.git
cd memoweft && npm install && npm run build
npm start -w @memoweft/host # then open http://localhost:7788
More: what the reference host is and is not.
evidence to confidence, in one table.Full documentation index: docs/README.md.
Pre-1.0 and library-first. Core is implemented and tested, but interfaces may still change between minor releases — stable, experimental, and internal surfaces are documented in the Memory Surface Contract. Zero runtime dependencies.
See the roadmap, contribution guide, and changelog.
MIT © 2026 MemoWeft contributors.
FAQs
Portable, traceable long-term memory for AI applications that keeps evidence, inference, and conflicts distinct.
The npm package memoweft receives a total of 27 weekly downloads. As such, memoweft popularity was classified as not popular.
We found that memoweft demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.