
Security News
npm Tooling Bug Incorrectly Marks One-Character Packages as Security Holders
npm confirmed a tooling bug incorrectly marked several one-character packages as security holders and said it was working on a rollback.
mem8
Advanced tools
Affected versions:
Context management toolkit for AI-assisted development. Manage memory, templates, and workflows with Claude Code and other AI tools.
# Install
uv tool install mem8
# Initialize workspace
cd your-project
mem8 init
# Check status
mem8 status
Persistent memory system for Claude Code with structured documentation. Keep AI context focused and relevant across long development sessions.
# Search your memory
mem8 search "authentication"
# Use Claude Code commands
/mem8:research "payment system"
/mem8:plan "add OAuth support"
/mem8:implement memory/shared/plans/oauth.md
/mem8:commit
Verify and manage CLI tools required for AI workflows.
# Check for missing tools
mem8 doctor
# Auto-install missing tools
mem8 doctor --fix
# List all tools and versions
mem8 tools
Verified tools include: ripgrep, fd, jq, gh, git, bat, delta, ast-grep, and more.
Global port leasing system prevents conflicts across projects.
# Lease port range for project
mem8 ports --lease
# View assigned ports
mem8 ports
# Kill process on port (safe mode)
mem8 ports --kill 20000
Share standardized configurations across teams using GitHub templates.
# Use official templates
mem8 init --template-source killerapp/mem8-plugin
# Use team templates
mem8 init --template-source your-org/templates
# Set default for all projects
mem8 templates set-default your-org/templates
Custom commands and agents for enhanced AI workflows.
Commands installed by default:
/mem8:research - Parallel codebase exploration/mem8:plan - Structured implementation planning/mem8:implement - Execute plans with progress tracking/mem8:validate - Verify implementation completeness/mem8:commit - Create semantic commits/mem8:describe-pr - Generate PR descriptions📚 Full documentation at codebasecontext.org
mem8 provides a structured development cycle:
/mem8:research) - Understand existing patterns/mem8:plan) - Design with concrete steps/mem8:implement) - Execute with progress tracking/mem8:validate) - Verify completeness/mem8:commit) - Create semantic commitsAfter running mem8 init --template full:
your-project/
├── .claude/
│ ├── commands/ # Custom slash commands
│ └── agents/ # Custom agent definitions
├── memory/
│ └── shared/
│ ├── research/ # Research documents
│ ├── plans/ # Implementation plans
│ ├── prs/ # PR descriptions
│ └── decisions/ # Technical decisions
└── .mem8/
├── config.yaml # Configuration
├── ports.md # Port assignments
└── tools.md # Tool inventory
Optional:
MIT License - see LICENSE file for details.
FAQs
Context management toolkit for AI-assisted development
We found that mem8 demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
npm confirmed a tooling bug incorrectly marked several one-character packages as security holders and said it was working on a rollback.

Research
/Security News
Newer packages in this compromise use native extensions and .pth loaders to execute JavaScript stealers in developer environments.

Research
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.