
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
contextual-engine
Advanced tools
Local-first temporal semantic code memory engine for AI tools
Contextual transforms code repositories into queryable, time-aware knowledge structures. Unlike traditional RAG systems that treat code as static documents, Contextual maintains full temporal awareness, structural understanding, and semantic relationships across your entire codebase.
The Four-Way Wedge:
# Recommended — persistent isolated environment
uv tool install contextual-engine
# Alternative
pipx install contextual-engine
# One-time global setup (downloads the embedding model)
contextual setup
# Initialize a project
cd /path/to/repo
contextual init .
# Index the codebase
contextual index .
# Auto-configure an AI client (writes MCP config for you)
contextual client claude # or: vscode, codex
Search, temporal queries, and graph traversal are exposed as MCP tools, not CLI subcommands — once a client is wired up, ask it a codebase question directly. See MCP Tools for the full tool list.
contextual client <name> writes this for you. To configure manually, or for a client it doesn't yet support:
{
"mcpServers": {
"contextual": {
"command": "contextual",
"args": ["mcp", "start"]
}
}
}
The daemon serves every workspace registered via contextual workspace add — no separate server process per project. Manage it directly with contextual mcp start|stop|restart|status|logs.
Business Source License 1.1 (BUSL-1.1) — see LICENSE for the full terms, including the Additional Use Grant and the Change Date / Change License.
FAQs
Temporal-first local code memory for AI tools via MCP
We found that contextual-engine demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.