github JavaScript re-analysis due

dfrancislyondflabc-tech/agentic-recall

v2.0.2
github

Long-term memory for agentic tasks. It tells you when it doesn't know.

maintainer
dfrancislyondflabc-tech
licence
MIT
first seen
2026-09-08
last seen
2026-09-14
releases · 30d
12
short id

dfrancislyondflabc-tech/agentic-recall is an MCP server distributed on github, maintained by dfrancislyondflabc-tech, tracked here since September 2026. It has shipped 12 releases (currently 2.0.2) and exposes 1 tool. Tools include memory. Its composite risk grade is B — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised one review prompt — dangerous code — each a pattern worth a human look rather than a finding of fault.

Its 1 tool appear to reach filesystem and shell / exec, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

full security breakdown →
tools 1
  • memory
release cadence · 90d 12 releases
06-18 00:00 08-01 00:00 now
recent releases last 10
version date src
v2.0.2 2026-09-11 github
2.0.2 2026-09-11 npm
v2.0.1 2026-09-10 github
2.0.1 2026-09-10 npm
v2.0.0 2026-09-10 github
2.0.0 2026-09-10 npm
v1.8.2 2026-09-09 github
1.8.2 2026-09-09 npm
v1.8.1 2026-09-09 github
1.8.1 2026-09-09 npm

view all →