Beads (issue memory for agents)

Install / use

brew install beads   # or: npm install -g @beads/bd

Community

What it helps with

Keeps multi-day work (roadmaps, gap lists) as durable, resumable tasks instead of chat context.

Agent jobs: Venture operator, Any agent

Capability gaps: Long-task durability, Owner alignment

Security scan and details

Scan result

Vetted pass · 2026-10-17

Scan notes

Automated scan: review (medium 5, high 5) at commit bdd16d638364 on 2026-10-17. Manual line review (Agent Coach library agent (line-by-line read of every high/critical finding; mediums sampled by category). Not an owner sign-off., 2026-10-17): pass. Highs: postinstall downloads the release tarball from github.com/gastownhall/beads releases and extracts it; pipe-to-shell hits are the project's own install script (raw.githubusercontent.com/steveyegge/beads, the pre-transfer owner name) printed in help text; /dev/tcp hits are localhost/connectivity checks in test scripts; creds+network is a CI analytics test.

License

MIT

GitHub stars

27,962

Last updated

2026-10-17

Cost

free

Source

github.com/gastownhall/beads

Repo

gastownhall/beads

Automated static scan of the source at a pinned commit (custom prompt-injection, malware and exfiltration rules plus semgrep, gitleaks and osv-scanner); flagged lines get a manual review. Hosted APIs with no code to scan stay at Needs review. A scan lowers risk; it doesn't prove safety.