deusdata / codebase-memory-mcp
Repository health
Security, maintenance, dependencies and license for deusdata/codebase-memory-mcp.
Security
Dependencies were not checked for known security issues, because RepoPilot found no dependency manifest it can read. That does not mean they are safe. Inspect its manifests on GitHub ↗
Security checks (RepoPilot estimate) · 7.3/10
OpenSSF has not scored this repository, so RepoPilot ran some of its checks from public GitHub data. Checks sorted from strongest to weakest.
- Recent activityLast commit 2d ago10/10
- License filePermissive license: MIT10/10
- Tests run on pull requestsCI configured + tests present10/10
- Static analysis on commitsCodeQL action detected in workflows10/10
- Least-privilege CI tokensWorkflows declare explicit, scoped permissions10/10
- Pinned dependenciesAll actions pinned to SHAs10/10
- Code review before merge13/20 recent PRs had requested reviewers6/10
- Automated dependency updatesNo Dependabot or Renovate config found0/10
- Security policyNo SECURITY.md found0/10
- Branch protectionInsufficient permissions to read branch protectionnot scored
Maintenance
Outside contributions: 12 of 79 external pull requests merged (92% of those decided), median 13 days to merge.From the 92 most recently updated pull requests, bots excluded.
Pull requests
- Open
- 25
- 0 stale (60+ days, no update in 30)
- Merged
- 3
- of the 30 latest
- Median time to merge
- 19 days
- From bots
- 3
- not listed below
Open
- #2381 fix(cli): resolve Windows CLI detection for long PATH and npm/mise/scoop shims (#221)wcy12378 · opened 27 days ago
- #2483 feat: add agentty agent support to the install CLIdavidwed · opened 22 days ago
- #2777 fix(daemon): log the effective auto_index_limit in daemon.autoindex.skippedgaurav0107 · opened today
- #2754 fix(pipeline): a bare C reference never binds a struct Fieldgaurav0107 · opened 2 days ago
- #2746 fix(ts-lsp): resolve calls through renamed named importsgaurav0107 · opened 3 days ago
Recently merged
- #1766 fix(registry): stop external package imports binding to project homonymsYyunozor · merged 22 Oct 2026
- #2739 fix(deps): patch Vite and certifi security advisoriesDeusData · merged 22 Oct 2026
- #1739 fix(codex): replace global guidance with an activation pointerastandrik · merged 7 Sept 2026
The 30 most recently updated pull requests.
Top contributors
Of the 100 most recent commits.
Issues
- Open
- 640
- issues and pull requests, as GitHub counts them
- Median time to close
- 26 days
- from 4 closed of the 33 latest
- Awaiting first reply
- 5
- of 29 open among the 33 latest
- Oldest open
- 226 days
Most wanted
- #734 Java/Spring: class-level @RequestMapping prefix dropped from Route nodes — breaks cross-repo-intelligence for prefixed controllers1 reaction · 6 comments
- #1502 v0.9.0: persistence:true never creates the artifact for newly indexed projects (existing projects keep updating)1 reaction · 9 comments
Rates come from the 33 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.