MCP Observatory
2m ago Tracked 59,469 Last 2m ago 24h 2,466
npm JavaScript analyzed 1.99.460

yaver-cli

v1.99.460
npm

Unified npm bootstrap for the Yaver agent, SDK injection, and local-first developer runtime

maintainer
kivanccakmak
licence
Apache-2.0
first seen
2026-05-22
last seen
2026-09-09
releases · 30d
40
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools
transport stdio verified reported listed in the official MCP registry counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

code evidence v1.99.460 · npm-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 23

filesystem 15

  • fs package/src/agent-runtime.js :1 const fs = require('fs');
  • fs package/src/analyzer.js :1 const fs = require('fs');
  • fs package/src/bundler.js :2 const fs = require('fs');
  • fs package/src/commands/deploy.js :20 const fs = require('fs');
  • fs package/src/commands/desktop.js :15 const fs = require("node:fs");
  • fs package/src/commands/doctor.js :1 const fs = require('fs');
  • fs package/src/commands/feedback.js :1 const fs = require('fs');
  • fs package/src/commands/init.js :1 const fs = require('fs');
  • fs package/src/commands/push.js :1 const fs = require('fs');
  • fs package/src/commands/run.js :17 const fs = require('fs');
  • fs package/src/commands/status.js :1 const fs = require('fs');
  • fs package/src/hermesc-runtime.js :21 const fs = require("fs");
show 3 more
  • fs package/src/postinstall.js :12 const fs = require("fs");
  • fs package/src/transport.js :2 const fs = require('fs');
  • fs package/src/update-check.js :13 const fs = require('fs');

shell / exec 11

  • shell package/src/agent-runtime.js :4 const { spawn, spawnSync } = require('child_process');
  • shell package/src/bundler.js :1 const { execSync, execFileSync } = require('child_process');
  • shell package/src/commands/deploy.js :22 const { spawnSync } = require('child_process');
  • shell package/src/commands/desktop.js :19 const { spawn, spawnSync } = require("node:child_process");
  • shell package/src/commands/doctor.js :4 const { execSync } = require('child_process');
  • shell package/src/commands/feedback.js :3 const { spawnSync } = require('child_process');
  • shell package/src/commands/run.js :19 const { spawn, spawnSync } = require('child_process');
  • shell package/src/hermesc-runtime.js :25 const { spawnSync } = require("child_process");
  • shell package/src/postinstall.js :11 const { execFileSync, execSync, spawnSync } = require("child_process");
  • shell package/src/preuninstall.js :21 const { spawnSync } = require("node:child_process");
  • shell package/src/update-check.js :17 const { spawnSync } = require('child_process');

network 6

  • net package/src/agent-runtime.js :6 const https = require('https');
  • net package/src/commands/desktop.js :16 const https = require("node:https");
  • net package/src/discovery.js :1 const http = require('http');
  • net package/src/hermesc-runtime.js :24 const https = require("https");
  • net package/src/transport.js :1 const http = require('http');
  • net package/src/update-check.js :12 const https = require('https');

install hooks 1

  • postinstall package/package.json :15 node src/postinstall.js

declared dependencies 2

  • semver@^7.6.0
  • yaver-mobile-headless@^0.1.2