superlocalmemory - npm Package Compare versions

Comparing version 3.6.4 to 3.6.5

package.json

 {
   "name": "superlocalmemory",
-  "version": "3.6.4",
+  "version": "3.6.5",
   "description": "Information-geometric agent memory with mathematical guarantees. 4-channel retrieval, Fisher-Rao similarity, zero-LLM mode, EU AI Act compliant. Works with Claude, Cursor, Windsurf, and 17+ AI tools.",
@@ -5,0 +5,0 @@ "keywords": [

pyproject.toml

 [project]
 name = "superlocalmemory"
-version = "3.6.4"
+version = "3.6.5"
 description = "Information-geometric agent memory with mathematical guarantees"
@@ -5,0 +5,0 @@ readme = "README.md"

src/superlocalmemory.egg-info/PKG-INFO

 Metadata-Version: 2.4
 Name: superlocalmemory
-Version: 3.6.4
+Version: 3.6.5
 Summary: Information-geometric agent memory with mathematical guarantees
@@ -5,0 +5,0 @@ Author-email: Varun Pratap Bhardwaj <[e-mail]>

src/superlocalmemory/__init__.py

@@ -31,3 +31,3 @@ """SuperLocalMemory — information-geometric agent memory."""
 
-__version__ = "3.6.3"
+__version__ = "3.6.5"
 
@@ -40,18 +40,31 @@ _REQUIRED_VERSIONS = {
 
+# Module name -> distribution name for metadata lookup.
+_DIST_NAMES = {
+    "sentence_transformers": "sentence-transformers",
+    "onnxruntime": "onnxruntime",
+}
+
+
 def _check_critical_deps() -> None:
-    """Warn if embedding-critical packages have wrong versions."""
+    """Warn if embedding-critical packages have wrong versions.
+
+    Reads installed versions from package metadata — does NOT import the
+    packages. Importing sentence_transformers here would eagerly load torch
+    (native) into every process: a memory blow-up on Apple Silicon and, on
+    some interpreters, a source of native-heap instability at teardown.
+    """
     import warnings
+    from importlib import metadata
     for mod_name, expected in _REQUIRED_VERSIONS.items():
         try:
-            mod = __import__(mod_name)
-            actual = getattr(mod, "__version__", None)
-            if actual and actual != expected:
-                warnings.warn(
-                    f"SuperLocalMemory requires {mod_name}=={expected} but "
-                    f"{actual} is installed. This causes memory blow-up on "
-                    f"Apple Silicon. Fix: pip install {mod_name}=={expected}",
-                    stacklevel=2,
-                )
-        except ImportError:
-            pass
+            actual = metadata.version(_DIST_NAMES[mod_name])
+        except metadata.PackageNotFoundError:
+            continue
+        if actual != expected:
+            warnings.warn(
+                f"SuperLocalMemory requires {mod_name}=={expected} but "
+                f"{actual} is installed. This causes memory blow-up on "
+                f"Apple Silicon. Fix: pip install {mod_name}=={expected}",
+                stacklevel=2,
+            )
 
@@ -58,0 +71,0 @@

New alerts

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Found 5 instances in 1 package

Fixed alerts

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Found 6 instances in 1 package

Improved metrics

Total package byte prevSize

7715457

0.01%

Lines of code

117887

0.01%

Number of low supply chain risk alerts

48

-2.04%

No dependency changes