← Browse

@rockbite/localforge

B

MCP server package @rockbite/localforge

mcp_servermcp

Install

agr install @rockbite/localforge --target claude

This artifact does not publish files for Claude.

Document

{ "name": "@rockbite/localforge", "version": "1.0.24", "type": "module", "main": "electron/main.js", "bin": { "localforge": "./cli.js" }, "scripts": { "test": "node tests/fileSystemTools.test.js", "test:fs": "npm run test", "test:grep": "node tests/grepTool.test.js", "fe": "vite dev", "server": "node src/index.js", "start": "electron .", "build:web": "vite build", "package:mac-arm64": "electron-packager . Localforge --platform=darwin --arch=arm64 --out=dist --icon=build/icons/mac/icon.icns --overwrite --asar.unpackDir="{public,views,tools,prompts,node_modules/level/,node_modules/@level/,node_modules/classic-level/,node_modules/abstract-level/}" --osx-sign.identity="$MACOS_SIGNING_IDENTITY_FROM_ACTION" --osx-sign.entitlements=build/entitlements.mac.plist", "package:mac-intel": "electron-packager . Localforge --platform=darwin --arch=x64 --out=dist --icon=build/icons/mac/icon.icns --overwrite --asar.unpackDir="{public,views,tools,prompts,node_modules/level/,node_modules/@level/,node_modules/classic-level/,node_modules/abstract-level/}" --osx-sign.identity="$MACOS_SIGNING_IDENTITY_FROM_ACTION" --osx-sign.entitlements=build/entitlements.mac.plist", "package:win": "electron-packager . Localforge --platform=win32 --arch=x64 --out=dist --icon=build/icons/win/icon.ico --overwrite --asar.unpackDir="{src,public,views,tools,prompts,node_modules/level/,node_modules/@level/,node_modules/classic-level/,node_modules/abstract-level/}"", "package:linux": "electron-packager . Localforge --platform=linux --arch=x64 --out=dist --icon=build/icons/png/512x512.png --overwrite --asar.unpackDir="{src,public,views,tools,prompts,node_modules/level/,node_modules/@level/,node_modules/classic-level/,node_modules/abstract-level/}"", "release": "npm run package", "create-dmg:arm64": "electron-installer-dmg ./dist/Localforge-darwin-arm64/Localforge.app Localforge --out=dist/installers-arm64 --icon=build/icons/mac/icon.icns --overwrite", "create-dmg:intel": "electron-installer-dmg ./dist/Localforge-darwin-x64/Localforge.app Localforge --out=dist/installers-intel --icon=build/icons/mac/icon.icns --overwrite" }, "keywords": [], "author": "Rockbite", "license": "ISC", "description": "Localforge - Local AI dev assistant", "dependencies": { "@anthropic-ai/sdk": "^0.39.0", "@google-cloud/vertexai": "^1.10.0", "@google/genai": "^0.8.0", "@modelcontextprotocol/sdk": "^1.11.1", "@mozilla/readability": "^0.6.0", "@shoelace-style/shoelace": "^2.12.0", "axios": "^1.8.4", "conf": "^13.1.0", "cors": "^2.8.5", "dotenv": "^16.5.0", "ejs": "^3.1.10", "electron": "^35.2.0", "express": "^5.1.0", "fix-path": "^4.0.0", "glob": "^11.0.1", "jsdom": "^26.1.0", "level": "^9.0.0", "level-read-stream": "^2.0.0", "lit": "^3.3.0", "micromatch": "^4.0.8", "multer": "^1.4.5-lts.1", "openai": "^4.94.0", "puppeteer": "^22.15.0", "socket.io": "^4.8.1", "tippy.js": "^6.3.7", "turndown": "^7.2.0" }, "devDependencies": { "@electron/packager": "^18.3.6", "@types/express": "^5.0.1", "concurrently": "^9.1.2", "electron-builder": "^26.0.12", "electron-installer-dmg": "^5.0.1", "electron-packager": "^17.1.2", "nodemon": "^3.1.9" }, "build": { "productName": "Localforge", "appId": "com.rockbite.localforge", "files": [ "electron/", "dist/", "node_modules/", "public/", "src/", "views/", "prompts/", "tools/", "tools/**" ], "directories": { "output": "release-builds" }, "forceCodeSigning": false, "mac": { "target": [ "dmg", "zip" ], "icon": "build/icons/mac/icon.icns", "category": "public.app-category.developer-tools", "hardenedRuntime": true }, "win": { "target": [ "nsis" ], "icon": "build/icons/win/icon.ico", "artifactName": "${productName}-Setup-${version}.${ext}", "signAndEditExecutable": false }, "linux": { "target": [ "AppImage" ], "icon": "build/icons/png", "category": "Development" }, "publish": [ { "provider": "github" } ] } }

Trustgrade B

  • passBody integrity

    Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.

  • warnType matchbest-effort: server code not analyzed

    Whether the artifact is really the kind of thing its metadata claims it is.

  • warnFreshnessstale (>1y)

    How long since the source repository was last pushed to.

  • passPrompt injection

    Scans the artifact's own text for instructions aimed at your agent rather than at you.

  • passLicense

    Whether the source repository declares an SPDX license permissive enough to redistribute.

How the grade is calculated

Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:

  • Aevery check passed
  • Bone warning
  • Ctwo warnings
  • Dprompt injection or body integrity failed, or three warnings
  • Fone of those failed, and something else is wrong

These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.

Versions

  • git-d202b38cb8892026-08-06