The crakit CLI v0.1.0

A single static binary, free, Apache-2.0. It works offline. The only network call is crakit vulns, which sends package coordinates to OSV.dev and nothing else.

Install

Linux and macOS, into ~/.local/bin, with the checksum verified:

curl -fsSL https://crakit.tewodros.me/install.sh | sh

Read the script first if you prefer: install.sh. Set CRAKIT_INSTALL_DIR to install elsewhere. On Windows, download the zip below and put crakit.exe on your PATH.

Downloads

Platform	File	SHA-256
macOS amd64	crakit_0.1.0_darwin_amd64.tar.gz	`2d6de3fbd23043f1cb740a8ebbb67e5aff4951ba2ea4793536c20722c6887cc2`
macOS arm64	crakit_0.1.0_darwin_arm64.tar.gz	`db5ed3ead1040e51dc664dc6d254741f4679433cd539a575c7fdf06e631b1c39`
Linux amd64	crakit_0.1.0_linux_amd64.tar.gz	`eb50b8d388883d1af82952e12fa29c403d8f8c1fab0645d407b07d08a28c22d6`
Linux arm64	crakit_0.1.0_linux_arm64.tar.gz	`1f87a4cd518d4ca427f5e35087ff3e4f5400a1ad0d0a444f2f8a55e61b5827be`
Windows amd64	crakit_0.1.0_windows_amd64.zip	`a75ff296b688e96eb84a273f3922e65995b55f14a6fa96a0cea09c5dfc488db6`
Windows arm64	crakit_0.1.0_windows_arm64.zip	`f1f046d855c2310d4bd50256b0a68340199f25cee9b860468a127a0f6c74389e`

SHA256SUMS · The CLI's own SBOM (CycloneDX 1.6)

Commands

crakit scope                 # interactive questionnaire; verdict with article citations (--json)
crakit sbom [path]           # CycloneDX 1.6 via syft or cdxgen, or from npm, pnpm, Go, Cargo and NuGet lockfiles
crakit vulns bom.cdx.json    # OSV.dev lookup by package coordinates (--fail-on high for CI)
crakit policy --org "Acme" --contact mailto:security@acme.example
                             # SECURITY.md (CVD policy) and an RFC 9116 security.txt
crakit incident new          # the Art. 14 clock: 24h, 72h and final-report deadlines, with stage drafts

This is a checklist and drafting aid, not legal advice and not a guarantee of compliance with Regulation (EU) 2024/2847. Confirm your obligations with qualified counsel and the market surveillance authority of your Member State. Text of the Regulation: EUR-Lex.