← Back to search Server uses shell capabilities via: child_process, spawnSync() Server uses env_vars capabilities via: process.env
clovis
Local-first bookkeeping CLI, MCP server, and SQLite ledger engine
npm
? Not scanned yet
Versions
1.3.0latestJun 26, 2026
1.2.0Jun 21, 2026
1.1.2Jun 21, 2026
1.1.1Jun 21, 2026
1.1.0Jun 20, 2026
+ show 25 moreshow less
1.0.0Jun 20, 2026
0.3.3Jun 14, 2026
0.3.2Jun 14, 2026
0.3.1Jun 14, 2026
0.3.0Jun 14, 2026
0.2.9Jun 14, 2026
0.2.8Jun 13, 2026
0.2.7Jun 11, 2026
0.2.6Jun 11, 2026
0.2.5Jun 11, 2026
0.2.4Jun 11, 2026
0.2.3Jun 11, 2026
0.2.2Jun 11, 2026
0.2.1Jun 10, 2026
0.2.0Jun 10, 2026
0.1.9Jun 10, 2026
0.1.8Jun 10, 2026
0.1.7Jun 10, 2026
0.1.6Jun 10, 2026
0.1.5Jun 10, 2026
0.1.4Jun 10, 2026
0.1.3Jun 9, 2026
0.1.2Jun 9, 2026
0.1.1Jun 9, 2026
0.1.0Jun 9, 2026
Tools 0
No tools indexed yet.
Permissions 2
shell high env_vars low Scan Findings 9
info
Sandbox failed to start for behavioral verification
info
package.json metadata
info
Transport: stdio
info
Required env vars (11)
info
Sandbox failed to start for output poisoning scan
high
Permission: shell access detected
low
Permission: env_vars access detected
info
SBOM generated: 171 components
medium
No build provenance detected (SLSA L0)