Skillget

nodespace-core

mcp
Guvenlik Denetimi
Basarisiz
Health Uyari
  • License — License: NOASSERTION
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Low visibility — Only 5 GitHub stars
Code Basarisiz
  • execSync — Synchronous shell command execution in .claude/hooks/check-feature-branch.ts
  • process.env — Environment variable access in enforce-bun.js
Permissions Gecti
  • Permissions — No dangerous permissions requested
Purpose
This tool is a local-first knowledge base with semantic search, designed to give AI coding assistants persistent access to your project context. It runs locally and communicates with AI tools via a built-in MCP server to reduce token usage and repetitive explanations.

Security Assessment
Overall risk: Medium. The tool accesses environment variables and, more critically, uses synchronous shell command execution (found in a git hook script). While it claims to run entirely on your machine with no data leaving localhost, the shell execution capability is a potential attack vector if manipulated. No hardcoded secrets were found, and it does not request dangerous system permissions. The license is marked as NOASSERTION in repository metadata, though the README states it uses the Functional Source License 1.1. Developers should review what data the knowledge base indexes and confirm no unintended data is exposed to AI tools.

Quality Assessment
The project is actively maintained, with its last push occurring today. However, it has very low community visibility with only 5 GitHub stars and is explicitly labeled as an "Alpha Preview," meaning data formats and features are not yet stable. The license (Functional Source License 1.1) is source-available but not a standard open-source license, which may restrict certain commercial use cases or contributions.

Verdict
Use with caution — the tool is actively maintained and runs locally, but early alpha status, low community adoption, and shell execution capabilities warrant a thorough code review before integrating into sensitive development workflows.
SUMMARY

Local-first knowledge base with semantic search for AI coding assistants. Fewer tokens, faster context.

README.md

NodeSpace

Faster context. Fewer tokens.

AI coding assistants forget everything between sessions. NodeSpace gives them persistent, searchable access to your project knowledge — so you stop re-explaining your codebase every time you start a conversation.

nodespace.ai · Download · Discord

⚠️ Alpha Preview — NodeSpace is in early development. Features may change and data formats are not yet stable.

NodeSpace Screenshot

Documentation

For full documentation, see nodespace-docs.

Why NodeSpace

Developers using AI assistants waste time copying files, re-explaining architecture, and watching context degrade mid-session. NodeSpace fixes this by sitting between your knowledge and your AI tools:

  • 80% fewer roundtrips — AI agents query your knowledge base via MCP instead of scanning files with grep/ripgrep
  • Runs entirely on your machine — no cloud accounts, no API calls, no data leaving localhost
  • Works offline — on planes, behind VPNs, anywhere

You write things down once. Every AI tool you use can find them instantly.

Installation

Download the Desktop App

Download NodeSpace →

Platform Format
macOS (Apple Silicon) .dmg
Windows .exe or .msi

Build from Source

Prerequisites:

  • Bun 1.0+ — curl -fsSL https://bun.sh/install | bash
  • Rust 1.80+ — curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh
git clone https://github.com/NodeSpaceAI/nodespace-core
cd nodespace-core
bun install
bun run tauri:dev

MCP Setup

NodeSpace includes a built-in MCP server that starts automatically when you open the app. Your AI tools connect to it locally — there's nothing to deploy or host.

Claude Code / Cursor / Codex / Other MCP Clients

Add to your MCP settings (e.g., ~/.claude.json for Claude Code):

{
  "mcpServers": {
    "nodespace": {
      "type": "http",
      "url": "http://localhost:3100/mcp"
    }
  }
}

Running Tests

bun run test          # Fast unit tests (Happy-DOM)
bun run test:browser  # Browser integration tests (Playwright)
bun run test:all      # All tests (unit + browser + Rust)
bun run rust:test     # Rust backend tests only

Community

License

NodeSpace is licensed under the Functional Source License 1.1 (Apache 2.0).

  • ✅ Use NodeSpace freely for any purpose
  • ✅ Modify the code to fit your needs

See LICENSE for the full text.

Yorumlar (0)

Sonuc bulunamadi