# capy 0.9.0

Encrypt your .env. Sync it across your team. Ship it anywhere.

Snapshot of gominimal/pkgs commit `defad31c69130df153e9263cb1e4dca96b3e2994` (pushed 2026-07-24T23:32:58.000Z).

## Install

```sh
min add capy
```

## Direct advisories

None at this commit.

## Transitive advisories

28 advisories inherited through runtime dependencies:

- CVE-2013-4412 (HIGH) via glibc
- CVE-2026-4046 (HIGH) via glibc
- CVE-2026-4437 (HIGH) via glibc
- CVE-2026-4438 (MEDIUM) via glibc
- CVE-2026-5435 (HIGH) via glibc
- CVE-2026-5450 (CRITICAL) via glibc
- CVE-2026-5928 (HIGH) via glibc
- CVE-2026-6238 (MEDIUM) via glibc
- OSV-2023-505 (UNKNOWN) via base → file
- CVE-2026-41991 (MEDIUM) via base → gzip
- CVE-2026-41992 (HIGH) via base → gzip
- CVE-2026-45186 (LOW) via git → expat
- CVE-2026-50219 (MEDIUM) via git → expat
- CVE-2026-56131 (MEDIUM) via git → expat
- CVE-2026-56132 (MEDIUM) via git → expat
- CVE-2026-56403 (MEDIUM) via git → expat
- CVE-2026-56404 (MEDIUM) via git → expat
- CVE-2026-56405 (MEDIUM) via git → expat
- CVE-2026-56406 (MEDIUM) via git → expat
- CVE-2026-56407 (MEDIUM) via git → expat
- CVE-2026-56408 (MEDIUM) via git → expat
- CVE-2026-56409 (MEDIUM) via git → expat
- CVE-2026-56410 (MEDIUM) via git → expat
- CVE-2026-56411 (MEDIUM) via git → expat
- CVE-2026-56412 (MEDIUM) via git → expat
- GHSA-q7rw-r7qq-2hx6 (UNKNOWN) via git → pcre2
- OSV-2026-343 (HIGH) via git → pcre2
- CVE-2026-58055 (MEDIUM) via node-lts → nghttp2

## Dependencies

- Build (1): node-lts
- Runtime (6): base, glibc, coreutils, ca-certificates, git, node-lts

## Scorecard

| Category | Score | Band |
| --- | --- | --- |
| supply-chain | 50 | mid |
| advisories | 10 | low |
| quality | 28 | low |
| maintenance | 43 | low |
| licence | 90 | good |

## Links

- Homepage: https://capy.sc
- Package page (HTML): https://minimal.dev/pkgs/capy
- JSON API (floats latest): https://minimal.dev/api/pkgs/capy.json
- SBOM (CycloneDX 1.5): https://minimal.dev/api/pkgs/capy/sbom.json