Security News
pnpm 12’s Rust Rewrite Cuts Install Times by Up to 90%
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.
By Sarah Gooding - Sep 01, 2026
New:Socket for Asana Is Now Available.Learn more →
clarissimi
Local-first contributor recognition CLI for auditable maintainer workflows.
Clarissimi CLI
Clarissimi turns reviewed contribution records into auditable contributor recognition outputs. The CLI works locally and does not require the GitHub Action runtime.
Install
The standalone package is available from npm. Install the latest verified release with Node.js 24 or newer:
npm install --global clarissimi
clarissimi --help
For GitHub-native automation or source-checkout development, see the main project README.
Safety boundary
Clarissimi keeps approved contribution records in repository-owned files. Live GitHub collection
and provider-backed draft generation require explicit configuration and credentials. Run
clarissimi --help for commands and flags; never place provider tokens in committed config files.
License
Apache-2.0
Keywords
FAQs
Local-first contributor recognition CLI for auditable maintainer workflows.
The npm package clarissimi receives a total of 11 weekly downloads. As such, clarissimi popularity was classified as not popular.
We found that clarissimi demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Package last updated on 26 Jul 2026
Related posts
Security News
6 AppSec CTOs Debate Open Source Supply Chain Security at Black Hat
Socket CTO Ahmad Nassri joins AppSec leaders at Black Hat to discuss active malware, package manager risks, and software supply chain defense.
By Sarah Gooding - Aug 31, 2026
Research
/Security News
13 Malicious Packagist Themes Deliver iOS Spyware That Steals Crypto Wallet Seeds
Thirteen malicious Packagist themes expose visitors on unpatched iPhones to a WebKit-to-kernel exploit chain that steals device data and wallet seeds.
By Kush Pandya - Aug 31, 2026