pypi Python analyzed 0.11.0 unconfirmed MCP

nestor-meaning

v0.11.0
pypi

Has a human checked this? A seal/serve/audit mechanic over a verified-match memory — translation, entity resolution and numeric reconciliation recipes, a hash-chained ledger, injected storage, and browser, terminal and MCP surfaces.

maintainer
licence
first seen
2026-08-15
last seen
2026-08-24
releases · 30d
17
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools
transport stdio counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals pypi-sdist
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed v0.11.0 · analyzer v33 · 2w ago

danger signals5

  • dynamic code execution __import__() nestor_meaning-0.11.0/tests/test_complexity_audit_batch1.py :184 m = __import__(f"nestor.{mod.name}", fromlist=["_"])
  • dynamic code execution __import__ sink nestor_meaning-0.11.0/tests/test_corpus_extractors_git_scoped.py :83 "PATH": __import__("os").environ.get("PATH", ""),
  • dynamic code execution eval()/exec() nestor_meaning-0.11.0/tests/test_docs.py :366 exec(compile(demo, "README quick start", "exec"), {"__name__": "__main__"}) # noqa: S102 — running documented examples
  • dynamic code execution __import__ sink nestor_meaning-0.11.0/tests/test_the_border.py :103 env={**dict(__import__("os").environ),
  • dynamic code execution __import__ sink nestor_meaning-0.11.0/tests/test_the_verification.py :85 env = {**dict(__import__("os").environ), "PYTHONPATH": str(JELES)}
code evidence v0.11.0 · pypi-sdist
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 180

filesystem 81

  • fs nestor_meaning-0.11.0/nestor/cascade.py :22 import pathlib
  • fs nestor_meaning-0.11.0/nestor/cli.py :44 import pathlib
  • fs nestor_meaning-0.11.0/nestor/config.py :34 from pathlib import Path
  • fs nestor_meaning-0.11.0/nestor/glossary.py :5 ``pathlib.Path("data/glossary.json")`` and resolve it on every call, so the
  • fs nestor_meaning-0.11.0/nestor/home_init.py :30 from pathlib import Path
  • fs nestor_meaning-0.11.0/nestor/home_paths.py :21 from pathlib import Path
  • fs nestor_meaning-0.11.0/nestor/keyring.py :53 import pathlib
  • fs nestor_meaning-0.11.0/nestor/ledger.py :19 from pathlib import Path
  • fs nestor_meaning-0.11.0/nestor/preferences.py :16 from pathlib import Path
  • fs nestor_meaning-0.11.0/nestor/sqlite_store.py :24 from pathlib import Path
  • fs nestor_meaning-0.11.0/nestor/triage/__init__.py :40 import pathlib
  • fs nestor_meaning-0.11.0/nestor/ui.py :69 import pathlib
show 28 more
  • fs nestor_meaning-0.11.0/nestor/ui_page.py :26 import pathlib
  • fs (weak) nestor_meaning-0.11.0/tests/_fleet_paths.py :11 import pathlib
  • fs (weak) nestor_meaning-0.11.0/tests/test_audit_2026_07_31.py :22 import pathlib
  • fs (weak) nestor_meaning-0.11.0/tests/test_audit_against_constitution.py :19 import pathlib
  • fs (weak) nestor_meaning-0.11.0/tests/test_audit_against_jeles.py :21 import pathlib
  • fs (weak) nestor_meaning-0.11.0/tests/test_before_authority.py :12 import pathlib
  • fs (weak) nestor_meaning-0.11.0/tests/test_before_bash.py :17 import pathlib
  • fs (weak) nestor_meaning-0.11.0/tests/test_before_build.py :14 import pathlib
  • fs (weak) nestor_meaning-0.11.0/tests/test_before_propose.py :27 import pathlib
  • fs (weak) nestor_meaning-0.11.0/tests/test_before_stop.py :25 import pathlib
  • fs (weak) nestor_meaning-0.11.0/tests/test_before_write_gate.py :29 import pathlib
  • fs (weak) nestor_meaning-0.11.0/tests/test_bench_dashboard.py :14 import pathlib
  • fs (weak) nestor_meaning-0.11.0/tests/test_ci_venv.py :15 import pathlib
  • fs (weak) nestor_meaning-0.11.0/tests/test_cli.py :12 import pathlib
  • fs (weak) nestor_meaning-0.11.0/tests/test_client_signed_seals_browser.py :33 import pathlib
  • fs (weak) nestor_meaning-0.11.0/tests/test_config_precedence.py :11 from pathlib import Path
  • fs (weak) nestor_meaning-0.11.0/tests/test_config_registry.py :14 from pathlib import Path
  • fs (weak) nestor_meaning-0.11.0/tests/test_constant_time_guard.py :10 import pathlib
  • fs (weak) nestor_meaning-0.11.0/tests/test_constitution_feed_verify.py :15 import pathlib
  • fs (weak) nestor_meaning-0.11.0/tests/test_corpus_contamination.py :20 import pathlib
  • fs (weak) nestor_meaning-0.11.0/tests/test_corpus_extractors_git_scoped.py :23 import pathlib
  • fs (weak) nestor_meaning-0.11.0/tests/test_corpus_readers_fail_closed.py :27 import pathlib
  • fs (weak) nestor_meaning-0.11.0/tests/test_count_countersignatures.py :26 import pathlib
  • fs (weak) nestor_meaning-0.11.0/tests/test_demo.py :12 import pathlib
  • fs (weak) nestor_meaning-0.11.0/tests/test_desks.py :24 import pathlib
  • fs (weak) nestor_meaning-0.11.0/tests/test_docs.py :19 import pathlib
  • fs (weak) nestor_meaning-0.11.0/tests/test_dogfood_store.py :12 import pathlib
  • fs (weak) nestor_meaning-0.11.0/tests/test_due_for_reverification.py :28 import pathlib

41 more not shown — this panel samples each group; the count above is the real total.

shell / exec 37

  • shell nestor_meaning-0.11.0/nestor/frank.py :33 import subprocess
  • shell nestor_meaning-0.11.0/nestor/keyring.py :558 A subprocess launched with ``subprocess.run(...)`` and no explicit ``env=``
  • shell (weak) nestor_meaning-0.11.0/tests/test_audit_2026_07_31.py :23 import subprocess
  • shell (weak) nestor_meaning-0.11.0/tests/test_audit_against_constitution.py :20 import subprocess
  • shell (weak) nestor_meaning-0.11.0/tests/test_audit_against_jeles.py :23 import subprocess
  • shell (weak) nestor_meaning-0.11.0/tests/test_before_build.py :15 import subprocess
  • shell (weak) nestor_meaning-0.11.0/tests/test_before_propose.py :28 import subprocess
  • shell (weak) nestor_meaning-0.11.0/tests/test_before_write_gate.py :30 import subprocess
  • shell (weak) nestor_meaning-0.11.0/tests/test_ci_venv.py :16 import subprocess
  • shell (weak) nestor_meaning-0.11.0/tests/test_cli.py :15 import subprocess
  • shell (weak) nestor_meaning-0.11.0/tests/test_corpus_contamination.py :23 import subprocess
  • shell (weak) nestor_meaning-0.11.0/tests/test_corpus_extractors_git_scoped.py :27 import subprocess
show 25 more
  • shell (weak) nestor_meaning-0.11.0/tests/test_corpus_readers_fail_closed.py :29 import subprocess
  • shell (weak) nestor_meaning-0.11.0/tests/test_count_countersignatures.py :27 import subprocess
  • shell (weak) nestor_meaning-0.11.0/tests/test_demo.py :13 import subprocess
  • shell (weak) nestor_meaning-0.11.0/tests/test_dogfood_store.py :13 import subprocess
  • shell (weak) nestor_meaning-0.11.0/tests/test_due_for_reverification.py :30 import subprocess
  • shell (weak) nestor_meaning-0.11.0/tests/test_feed_all.py :20 import subprocess
  • shell (weak) nestor_meaning-0.11.0/tests/test_feed_fleet_repos.py :18 import subprocess
  • shell (weak) nestor_meaning-0.11.0/tests/test_filing_cabinet.py :23 import subprocess
  • shell (weak) nestor_meaning-0.11.0/tests/test_git_decisions.py :22 import subprocess
  • shell (weak) nestor_meaning-0.11.0/tests/test_hook_guard.py :14 import subprocess
  • shell (weak) nestor_meaning-0.11.0/tests/test_hook_wiring.py :22 import subprocess
  • shell (weak) nestor_meaning-0.11.0/tests/test_hooks.py :6 import subprocess
  • shell (weak) nestor_meaning-0.11.0/tests/test_import_purity.py :20 import subprocess
  • shell (weak) nestor_meaning-0.11.0/tests/test_measurement_harnesses.py :22 import subprocess
  • shell (weak) nestor_meaning-0.11.0/tests/test_mutation_guard.py :13 import subprocess
  • shell (weak) nestor_meaning-0.11.0/tests/test_packaging.py :17 import subprocess
  • shell (weak) nestor_meaning-0.11.0/tests/test_preferences.py :10 import subprocess
  • shell (weak) nestor_meaning-0.11.0/tests/test_record_demo.py :14 import subprocess
  • shell (weak) nestor_meaning-0.11.0/tests/test_session_end.py :13 import subprocess
  • shell (weak) nestor_meaning-0.11.0/tests/test_session_start.py :15 import subprocess
  • shell (weak) nestor_meaning-0.11.0/tests/test_shoebox.py :19 import subprocess
  • shell (weak) nestor_meaning-0.11.0/tests/test_the_border.py :21 import subprocess
  • shell (weak) nestor_meaning-0.11.0/tests/test_the_verification.py :26 import subprocess
  • shell (weak) nestor_meaning-0.11.0/tests/test_two_desks.py :30 import subprocess
  • shell (weak) nestor_meaning-0.11.0/tests/test_two_instances.py :15 import subprocess

network 7

  • net nestor_meaning-0.11.0/nestor/ollama_embed.py :16 import urllib.error
  • net nestor_meaning-0.11.0/nestor/ui.py :74 import urllib.parse
  • net (weak) nestor_meaning-0.11.0/tests/test_cli.py :14 import socket
  • net (weak) nestor_meaning-0.11.0/tests/test_ui.py :20 import urllib.error
  • net (weak) nestor_meaning-0.11.0/tests/test_ui_edge_seal.py :23 import urllib.error
  • net (weak) nestor_meaning-0.11.0/tests/test_ui_graph.py :19 import urllib.error
  • net (weak) nestor_meaning-0.11.0/tests/test_ui_triage.py :20 import urllib.error

secrets 37

  • secrets nestor_meaning-0.11.0/nestor/cli.py :51 from . import keyring as keyring_mod
  • secrets nestor_meaning-0.11.0/nestor/curator.py :48 from . import keyring, ledger, memory, signing
  • secrets nestor_meaning-0.11.0/nestor/engine.py :209 if os.environ.get("ANTHROPIC_API_KEY") or os.environ.get("ANTHROPIC_AUTH_TOKEN"):
  • secrets nestor_meaning-0.11.0/nestor/signing.py :66 from . import keyring as keyring_mod
  • secrets nestor_meaning-0.11.0/nestor/ui.py :1755 os.environ["NESTOR_SEAL_KEY"] = _read_demo_sealkey(keyfile)
  • secrets (weak) nestor_meaning-0.11.0/tests/conftest.py :56 os.environ["NESTOR_SEAL_KEY"] = "test-key"
  • secrets (weak) nestor_meaning-0.11.0/tests/test_audit_2026_07_31.py :36 os.environ['NESTOR_SEAL_KEY'] = 'shared-key'
  • secrets (weak) nestor_meaning-0.11.0/tests/test_audit_against_constitution.py :26 from nestor import keyring as keyring_mod
  • secrets (weak) nestor_meaning-0.11.0/tests/test_audit_against_jeles.py :29 from nestor import keyring as keyring_mod
  • secrets (weak) nestor_meaning-0.11.0/tests/test_calibrate.py :107 os.environ['NESTOR_SEAL_KEY'] = 'k'
  • secrets (weak) nestor_meaning-0.11.0/tests/test_cli.py :61 os.environ['NESTOR_SEAL_KEY'] = 'test-key'
  • secrets (weak) nestor_meaning-0.11.0/tests/test_cli_ask_domain.py :22 os.environ["NESTOR_SEAL_KEY"] = "test-key"
show 25 more
  • secrets (weak) nestor_meaning-0.11.0/tests/test_conflicting_seal.py :28 os.environ['NESTOR_SEAL_KEY'] = 'test-key'
  • secrets (weak) nestor_meaning-0.11.0/tests/test_count_countersignatures.py :167 os.environ['NESTOR_SEAL_KEY'] = 'test-fixture-key-not-a-secret'
  • secrets (weak) nestor_meaning-0.11.0/tests/test_curator.py :22 os.environ['NESTOR_SEAL_KEY'] = 'test-key'
  • secrets (weak) nestor_meaning-0.11.0/tests/test_custom_matcher_surfaces.py :120 os.environ["NESTOR_SEAL_KEY"] = "test-key"
  • secrets (weak) nestor_meaning-0.11.0/tests/test_desks.py :52 os.environ["NESTOR_SEAL_KEY"] = "test-key"
  • secrets (weak) nestor_meaning-0.11.0/tests/test_due_for_reverification.py :146 os.environ['NESTOR_SEAL_KEY'] = 'test-fixture-key-not-a-secret'
  • secrets (weak) nestor_meaning-0.11.0/tests/test_embedding_cache.py :67 os.environ["NESTOR_CACHE_KEY"] = "cache-test-key"
  • secrets (weak) nestor_meaning-0.11.0/tests/test_findings_2026_07_30.py :47 os.environ['NESTOR_SEAL_KEY'] = 'realkey'
  • secrets (weak) nestor_meaning-0.11.0/tests/test_findings_2026_08_07_deferred.py :27 os.environ['NESTOR_SEAL_KEY'] = 'shared-key'
  • secrets (weak) nestor_meaning-0.11.0/tests/test_fix_keys_add_ed25519.py :27 from nestor import keyring as keyring_mod
  • secrets (weak) nestor_meaning-0.11.0/tests/test_fix_propose_names_refused.py :27 os.environ['NESTOR_SEAL_KEY'] = 'test-key'
  • secrets (weak) nestor_meaning-0.11.0/tests/test_keyring.py :15 from nestor import keyring, memory, signing
  • secrets (weak) nestor_meaning-0.11.0/tests/test_ledger_verify_interval.py :16 os.environ["NESTOR_SEAL_KEY"] = "shared-key"
  • secrets (weak) nestor_meaning-0.11.0/tests/test_matcher_symmetry.py :25 os.environ['NESTOR_SEAL_KEY'] = 'test-key'
  • secrets (weak) nestor_meaning-0.11.0/tests/test_portable.py :32 os.environ['NESTOR_SEAL_KEY'] = 'shared-key'
  • secrets (weak) nestor_meaning-0.11.0/tests/test_prefilter.py :203 os.environ['NESTOR_SEAL_KEY'] = 'k'
  • secrets (weak) nestor_meaning-0.11.0/tests/test_rejection.py :21 os.environ['NESTOR_SEAL_KEY'] = 'test-key'
  • secrets (weak) nestor_meaning-0.11.0/tests/test_seal_hardening.py :31 os.environ['NESTOR_SEAL_KEY'] = 'k'
  • secrets (weak) nestor_meaning-0.11.0/tests/test_seal_replacement.py :30 os.environ['NESTOR_SEAL_KEY'] = 'test-key'
  • secrets (weak) nestor_meaning-0.11.0/tests/test_serve.py :24 os.environ['NESTOR_SEAL_KEY'] = 'test-key'
  • secrets (weak) nestor_meaning-0.11.0/tests/test_signing.py :29 os.environ['NESTOR_SEAL_KEY'] = 'operator-secret-held-outside-the-store'
  • secrets (weak) nestor_meaning-0.11.0/tests/test_ui.py :31 os.environ['NESTOR_SEAL_KEY'] = 'test-key'
  • secrets (weak) nestor_meaning-0.11.0/tests/test_ui_custom_matcher.py :62 os.environ["NESTOR_SEAL_KEY"] = "test-key"
  • secrets (weak) nestor_meaning-0.11.0/tests/test_unconventional.py :644 os.environ["NESTOR_SEAL_KEY"] = ""
  • secrets (weak) nestor_meaning-0.11.0/tests/test_verifier_policy.py :33 os.environ["NESTOR_SEAL_KEY"] = "test-key"

database 15

  • db nestor_meaning-0.11.0/nestor/sqlite_store.py :17 import sqlite3
  • db (weak) nestor_meaning-0.11.0/tests/test_before_authority.py :150 # Reads. `import sqlite3` is Python's module, not the shell CLI, and
  • db (weak) nestor_meaning-0.11.0/tests/test_corpus_contamination.py :22 import sqlite3
  • db (weak) nestor_meaning-0.11.0/tests/test_corpus_extractors_git_scoped.py :26 import sqlite3
  • db (weak) nestor_meaning-0.11.0/tests/test_feed_fleet_repos.py :17 import sqlite3
  • db (weak) nestor_meaning-0.11.0/tests/test_filing_cabinet.py :91 import sqlite3
  • db (weak) nestor_meaning-0.11.0/tests/test_git_decisions.py :21 import sqlite3
  • db (weak) nestor_meaning-0.11.0/tests/test_jeles_bridge.py :194 import sqlite3
  • db (weak) nestor_meaning-0.11.0/tests/test_measurement_harnesses.py :21 import sqlite3
  • db (weak) nestor_meaning-0.11.0/tests/test_open_findings.py :11 import sqlite3
  • db (weak) nestor_meaning-0.11.0/tests/test_review_ledger.py :20 import sqlite3
  • db (weak) nestor_meaning-0.11.0/tests/test_session_start.py :14 import sqlite3
show 3 more
  • db (weak) nestor_meaning-0.11.0/tests/test_store_migration.py :35 import sqlite3
  • db (weak) nestor_meaning-0.11.0/tests/test_supersede.py :12 import sqlite3
  • db (weak) nestor_meaning-0.11.0/tests/test_two_desks.py :152 import sqlite3

declared dependencies 10

  • cryptography@>=41
  • pytest@>=8.0
  • ruff@==0.16.3
  • bandit@*
  • mypy@*
  • anthropic@>=0.60
  • fastembed@>=0.4
  • willow-gate@*
  • build@>=1.2
  • twine@>=5.1