Conversation
varun369
changed the title
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
SuperLocalMemory now leads with a reproducible store/recall proof, installation and current research/source links. The governance and mathematical research remain below that acquisition layer; star links are optional.
Repair the existing dependency-security blocker instead of bypassing it. Update affected runtime and ingestion pins, adopt a compatible patched Torch/setuptools combination, and remove both old audit exceptions. Temporarily omit the unpatched NLTK/LLMLingua dependency pair while preserving backend source and safe/lossless fallback. Existing unsafe/unknown backend versions are blocked before loading; readiness does not suggest reinstalling them.
Validation: independent unfiltered all-extras audit143entries/zero known vulnerabilities; high/high Bandit and secrets/IP scan pass. Actual local embedding and reranker compatibility checks pass. Full local default suite ran11,321passed,37skipped,330deselected,one obsolete77floor assertion failed; strengthened83floor and other repaired contract assertions pass targeted reruns. Remote platform CI is the remaining merge gate. Independent code/Python/security/prose reviewers approve source changes.
The published PyPI/npm package remains4.1.17; source repairs do not claim that already installed/published artifacts changed. New package publication is a separate release action. Merge proof docs before dependent website deployments. User approved the necessary repairs and website deployment; no social posting is in scope.