When Grype, Trivy or Dependency-Track turns up something in your product that's actually being exploited, craclock works out whether you have to report it, prepares the report, and keeps the proof of when you knew and what you filed. You submit it yourself: a filing is a legal statement by you, not by a tool, so craclock hands you the finished text instead of sending it for you.

Not yet released. craclock hasn’t shipped its first CLI build, so there’s nothing to install today. This page describes the planned install path once the first release does.

Homebrew (macOS, Linux)

Planned: brew install craclock/tap/craclock.

Direct download

Planned: a signed binary per platform from GitHub Releases, verified with cosign before you run it.

Self-hosting the server

Running your own instance (API, web UI and scheduler) instead of the hosted app: see Self-host.

Verify your install

Once installed, craclock --help will confirm it’s working.