Big News: Socket raises $60M Series C at a $1B valuation to secure software supply chains for AI-driven development.Announcement
Sign In

yaver-cli

Package Overview
Dependencies
Maintainers
1
Versions
250
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install
Potential malware was recently detected in this package.

Affected versions:

1.99.2091.99.263

yaver-cli

Unified npm bootstrap for the Yaver agent, SDK injection, and local-first developer runtime

Source
npmnpm
Version
1.99.261
Version published
Weekly downloads
1.8K
-42.04%
Maintainers
1
Weekly downloads
 
Created
Source

hermesc binaries for yaver-cli

Hermes bytecode compiler binaries matched to react-native@0.81.5 (Hermes BC version 96, the version baked into the Yaver container app).

How this directory is populated

  • darwin-arm64/ and darwin-x64/ ship with the tarball as a macOS universal binary. They're small (~6 MB) and cover the vast majority of yaver-push users.
  • Other platforms (linux-x64, win32-x64) are installed at npm install -g yaver-cli time by src/postinstall.js → it extracts the right binary from the react-native npm tarball.
  • linux-arm64 has no upstream prebuilt. On first push, bundler.js falls back to getHermescPathAsync({ allowBuildFromSource: true }), which builds hermesc from the project's own node_modules/react-native/sdks/hermes/ sources via CMake. Takes ~3–5 min, cached afterwards.

How bundler.js resolves the right one

  • Platform-matched cache (this dir, per <platform>-<arch> key)
  • ~/.yaver/hermesc/<key>/hermesc (per-user mirror)
  • Legacy flat layout (top-level hermesc or hermesc.exe)
  • Project-local node_modules/react-native/sdks/hermesc/...

Never commit binaries into platform subdirs other than the two macOS ones — the installer writes them at install time and committing them would make every git pull churn large files.

Keywords

mcp

FAQs

Package last updated on 06 Jun 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts