npm JavaScript analyzed 2.10.1 unconfirmed MCP

@monoes/monomindcli

v2.10.1
npm

CLI engine for Monomind — an open-source MCP server that extends Claude Code with a codebase knowledge graph (tree-sitter + SQLite), persistent memory, multi-agent task coordination, and session hooks. Apache 2.0 licensed, fully local.

maintainer
nokhodian
licence
Apache-2.0
first seen
2026-07-22
last seen
2026-08-26
releases · 30d
6
short id

@monoes/monomindcli is an MCP server distributed on npm, maintained by nokhodian, tracked here since July 2026. It has shipped 226 releases (currently 2.10.1). Its composite risk grade is C — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised 2 review prompts — dangerous code and hidden prompt content — each a pattern worth a human look rather than a finding of fault.

Its 0 tools appear to reach filesystem, shell / exec, network, secrets and database, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

full security breakdown →
tools 0

No tools recorded for this server yet.

release cadence · 90d 120 releases
06-20 00:00 08-03 00:00 now
recent releases last 10
version date src
2.10.1 2026-08-25 npm
2.10.0 2026-08-25 npm
2.9.27 2026-08-24 npm
2.9.25 2026-08-23 npm
2.9.24 2026-08-23 npm
2.9.23 2026-08-22 npm
2.9.22 2026-08-17 npm
2.9.21 2026-08-16 npm
2.9.20 2026-08-15 npm
2.9.19 2026-08-15 npm

view all →