package.json is present without a corresponding lockfile or pinned dependency snapshot.
Commit a lockfile or use fully pinned requirements for reproducible dependency resolution.
ai.agent-bev/bev-door · v0.2.5 · MCP server
The world's largest agentic B2B hub for beer, wine and spirits. Powered by CUVEE. Trade only.
Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.
From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.
HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.