github TypeScript re-analysis due

kitepon/Caveat

github

Long-term memory layer for Claude Code and Codex — markdown-in-git knowledge base, SQLite FTS5 retrieval, MCP, and native agent hooks.

maintainer
kitepon
licence
MIT
first seen
2026-08-13
last seen
2026-09-13
releases · 30d
8
short id

kitepon/Caveat is an MCP server distributed on github, maintained by kitepon, tracked here since August 2026. It has shipped 35 releases and exposes 6 tools. Tools include caveat_get, caveat_list_recent, caveat_pull, caveat_record, caveat_search, caveat_update. Its composite risk grade is B — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised one review prompt — dangerous code — each a pattern worth a human look rather than a finding of fault.

Its 6 tools appear to reach filesystem, shell / exec and network, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

full security breakdown →
tools 6
  • caveat_get
  • caveat_list_recent
  • caveat_pull
  • caveat_record
  • caveat_search
  • caveat_update
release cadence · 90d 13 releases
06-18 00:00 08-01 00:00 now
recent releases last 10
version date src
v0.19.2 2026-09-12 github
v0.19.1 2026-09-09 github
v0.18.0 2026-08-30 github
v0.17.8 2026-08-30 github
v0.17.7 2026-08-30 github
v0.17.6 2026-08-30 github
v0.17.5 2026-08-30 github
v0.17.4 2026-08-30 github
v0.17.3 2026-08-03 github
v0.17.2 2026-07-29 github

view all →