Yaver.Io — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Yaver.Io (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Yaver is a local-first developer toolkit for driving coding agents, previews, feedback, and deploy loops from your phone.
Your code stays on your machine. The mobile app is the remote control; the yaver agent runs on your Mac, Linux box, WSL machine, Pi, or VPS; the SDK captures feedback from your own dev builds.
<p align="center"> <a href="https://github.com/kivanccakmak/yaver.io/releases/download/yaver-hosting-demo-v1/yaver-hosting-demo.mp4"> <img src="demo-videos/yaver-hosting-demo.gif" alt="Yaver phone-to-agent demo animation" width="720"> </a> </p>
<p align="center"> <a href="https://github.com/kivanccakmak/yaver.io/releases/download/yaver-hosting-demo-v1/yaver-hosting-demo.mp4">Watch the landing demo</a> </p>
npm install -g yaver-cli
yaver auth
yaver serveFor headless machines:
yaver auth --headless
yaver serveIf an AI coding agent is setting Yaver up for you, read the canonical machine guide first:
curl -s https://yaver.io/llms.txtyaver serve on your own machine.| Path | Purpose |
|---|---|
desktop/agent/ | Go agent, CLI surfaces, local API, relay/P2P/runtime integrations |
mobile/ | React Native mobile app and native preview container |
web/ | Next.js marketing site and dashboard |
backend/convex/ | Hosted identity, session, and device-discovery metadata |
relay/ | QUIC relay service |
sdk/ | Public SDKs and feedback clients |
demo/ | Small fixture apps used to test SDK and push flows |
demo-videos/ | Source notes for the landing/demo clips |
docs/ | Architecture notes, setup guides, audits, handoffs, and planning material |
Markdown in this repo is context, not source of truth. If a doc and the code disagree, trust the code and fix the doc in the same change.
# Web dashboard / landing
cd web
npm install
npm run dev
# Go agent tests
cd desktop/agent
go test ./...Run the narrower package tests for the area you change; the full repo spans Go, Node, React Native, Swift, Kotlin, Flutter, Unity, and embedded C work.
Core Yaver code is under FSL-1.1-Apache-2.0. SDK packages are Apache-2.0 where marked. See docs/planning/LICENSING.md.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.