Saucebox Registry
← Browse

@dashlane/cli

A

MCP server package @dashlane/cli

mcp_servermcp

Install

agr install @dashlane/cli --target claude

This artifact does not publish files for Claude.

Document

{ "name": "@dashlane/cli", "version": "6.2628.1", "description": "Manage your Dashlane vault through a CLI tool", "type": "module", "main": "dist/index.cjs", "bin": { "dcli": "dist/index.cjs" }, "pkg": { "assets": [ "../node_modules/better-sqlite3/build/Release/better_sqlite3.node", "../node_modules/@json2csv/plainjs/dist//*", "../node_modules/@json2csv/formatters/dist//", "../node_modules/@json2csv/transforms/dist/**/", "../node_modules/@streamparser/json/dist//*", "../node_modules/node-mac-auth/build/Release/auth.node" ], "ignore": [ "//better-sqlite3/deps/**/" ] }, "scripts": { "build": "node scripts/build.mjs", "watch": "tsc --watch", "lint": "eslint src", "format": "prettier --write src && eslint --fix src", "start": "node dist/index.cjs", "start:dev": "node build/index.js", "pkg:linux": "pkg ./dist -t node22-linux-x64 -o bundle/dcli-linux -C GZip --public --public-packages tslib,thirty-two,node-hkdf-sync,vows --no-bytecode", "pkg:macos": "pkg ./dist -t node22-macos-x64 -o bundle/dcli-macos -C GZip --public --public-packages tslib,thirty-two,node-hkdf-sync,vows --no-bytecode", "pkg:macos-arm": "pkg ./dist -t node22-macos-arm64 -o bundle/dcli-macos-arm -C GZip --public --public-packages tslib,thirty-two,node-hkdf-sync,vows --no-bytecode --no-native-build", "pkg:win": "pkg ./dist -t node22-win-x64 -o bundle/dcli-win.exe -C GZip --public --public-packages tslib,thirty-two,node-hkdf-sync,vows --no-bytecode", "pkg": "yarn run build && yarn run pkg:linux && yarn run pkg:macos && yarn run pkg:win", "version:bump": "node --loader ts-node/esm ./src/bumpVersion.ts", "prepare": "husky", "test": "mocha" }, "author": { "name": "Dashlane", "email": "engineering@dashlane.com", "url": "https://www.dashlane.com/" }, "contributors": [], "license": "Apache-2.0", "nativeDependencies": { "better-sqlite3": "", "@json2csv/plainjs": "", "@json2csv/transforms": "", "@napi-rs/clipboard": "", "@napi-rs/keyring": "", "@node-rs/argon2": "", "playwright-core": "", "node-mac-auth": "" }, "devDependencies": { "@aivenio/tsc-output-parser": "^2.1.1", "@eslint/eslintrc": "^3.2.0", "@eslint/js": "^9.15.0", "@types/async": "^3.2.24", "@types/better-sqlite3": "^7.6.11", "@types/chai": "^5.0.1", "@types/eslint__js": "^8.42.3", "@types/inquirer": "^9.0.7", "@types/libsodium-wrappers": "^0.7.14", "@types/mocha": "^10.0.9", "@types/node": "^22.9.0", "@yao-pkg/pkg": "^6.1.1", "chai": "^5.1.2", "esbuild": "^0.25.0", "eslint": "^9.15.0", "eslint-config-prettier": "^9.1.0", "eslint-plugin-prettier": "^5.2.1", "execa": "^9.5.1", "husky": "^9.1.7", "mocha": "^10.8.2", "prettier": "^3.3.3", "ts-node": "^10.9.2", "typescript": "^5.6.3", "typescript-eslint": "^8.15.0" }, "dependencies": { "@dashlane/apiconnect-utils": "^3.1.9", "@dashlane/apiconnect-worker": "^3.1.9", "@dashlane/nsm-attestation": "^1.0.2", "@inquirer/prompts": "^7.1.0", "@json2csv/plainjs": "^7.0.6", "@json2csv/transforms": "^7.0.6", "@modelcontextprotocol/sdk": "^1.26.0", "@napi-rs/clipboard": "^1.1.2", "@napi-rs/keyring": "^1.1.6", "@node-rs/argon2": "^2.0.0", "@serenity-kit/opaque": "^1.1.0", "ajv": "^8.18.0", "ajv-formats": "^3.0.1", "better-sqlite3": "^11.5.0", "commander": "^12.1.0", "got": "^14.4.4", "jsonpath-plus": "^10.3.0", "libsodium-wrappers": "^0.7.15", "node-mac-auth": "^1.1.0", "otplib": "^12.0.1", "playwright-core": "^1.49.0", "winston": "^3.17.0", "xml-js": "^1.6.11", "zlib": "^1.0.5", "zod": "^3.25.67" }, "engines": { "node": ">=22", "yarn": ">=4.2.2" }, "packageManager": "yarn@4.5.1" }

Trustgrade A

  • passBody integrity

    Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.

  • warnType matchbest-effort: server code not analyzed

    Whether the artifact is really the kind of thing its metadata claims it is.

  • passFreshness

    How long since the source repository was last pushed to.

  • passPrompt injection

    Scans the artifact's own text for instructions aimed at your agent rather than at you.

  • passLicense

    Whether the source repository declares an SPDX license permissive enough to redistribute.

How the grade is calculated

Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:

  • Aevery check passed
  • Bone warning
  • Ctwo warnings
  • Dprompt injection or body integrity failed, or three warnings
  • Fone of those failed, and something else is wrong

These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.

Versions

  • git-f4ad38e74a692026-08-06