pkg.soopen package index

security

Package publisher tools

Package publishing tools can use registry tokens, sign artifacts, and push releases from an agent-controlled shell.

summary

Why this package group is here

Package publisher tools currently includes 457 package catalog entries. 0 have protected-tool coverage, 3 have approval-gate metadata, and 70 have non-low Geiger classifier findings. The grouping comes from package metadata, so it can stay current as that metadata changes.

Generated source

This hub uses the same local package data as individual package pages: pkg.so package metadata, Homebrew enrichment, Geiger classifier output, secret-handling manifests, and approval-gate seeds where available.

Review model

Use the hub to find command families that need tighter secret injection, approval gates, or manual review before agents run them.

High-signal tools

node7 approval-gate rules are present.go7 approval-gate rules are present.uv6 approval-gate rules are present.rubydoc example: interpreter runtimecreate-dmggeneralized runtime or code generation signalportable-rubygeneralized runtime or code generation signaldubgeneralized runtime or code generation signalbuild2generalized runtime or code generation signalcargo-makegeneralized runtime or code generation signalopalgeneralized runtime or code generation signalrustnarrow executable package without higher-risk signalsruby-buildInstall various Ruby versions and implementations

Approval-gated tools

node7 approval-gate rules are present.go7 approval-gate rules are present.uv6 approval-gate rules are present.

Related hubs

Terminal utility packagesCommand-line utilities with local package pages, executable metadata, and Automic Vault security notes.445Web development packagesWeb servers, frontend build tools, JavaScript packages, CSS tools, and browser-adjacent utilities.378Package ecosystem packagesPackages that install, publish, inspect, or automate other package ecosystems.323Developer build packagesBuild systems, compilers, generators, and developer tools that influence local source trees and artifacts.302Text processing packagesPackages used to inspect, transform, search, render, or generate text and structured documents.294Homebrew utility packagesHomebrew packages with local package pages that need at least one crawlable package-graph path.238npm command packagesnpm packages with local package pages and command-line or developer workflow metadata.219Language runtime packagesLanguage runtimes, package ecosystems, and interpreter-adjacent packages.212

Representative package spokes

node7 approval-gate rules are present.acornECMAScript parserbrowserslistShare target browsers between different front-end tools, like Autoprefixer, Stylelint and babel-env-presetbaseline-browser-mappingA library for obtaining browser versions with their maximum supported Baseline feature set and Widely Available status.uv6 approval-gate rules are present.go7 approval-gate rules are present.noptOption parsing for Node, supporting types, shorthands, etc. Used by npm.autoprefixerParse CSS and add vendor prefixes to CSS rules using values from the Can I Use websitenapi-postinstallThe postinstall script helper for handling native bindings in legacy npm versionshuskyModern native Git hooksastringJavaScript code generator from an ESTree-compliant AST.rubydoc example: interpreter runtimeansi-html-communityAn elegant lib that converts the chalked (ANSI) text to HTML. (Community)pnpminfrastructure mutation or orchestration signalhelmKubernetes package managerrustnarrow executable package without higher-risk signals

packages

Indexed package pages

PackageManagerSignalsWhy it appears here
nodeHomebrewapproval gate, yellow risk, v26.8.17 approval-gate rules are present.
goHomebrewapproval gate, yellow risk, v1.27.17 approval-gate rules are present.
uvHomebrewapproval gate, v0.12.106 approval-gate rules are present.
rubyHomebrewyellow risk, v4.0.6doc example: interpreter runtime
create-dmgHomebrewyellow risk, v1.3.0generalized runtime or code generation signal
portable-rubyHomebrewyellow risk, v4.0.6generalized runtime or code generation signal
dubHomebrewyellow risk, v1.42.0generalized runtime or code generation signal
build2Homebrewyellow risk, v0.18.1generalized runtime or code generation signal
cargo-makeHomebrewyellow risk, v0.37.24generalized runtime or code generation signal
opalHomebrewyellow risk, v1.8.3generalized runtime or code generation signal
rustHomebrewgreen risk, v1.98.0narrow executable package without higher-risk signals
ruby-buildHomebrewv20260902no executable entrypoint in the package index
poetryHomebrewv2.4.3no executable entrypoint in the package index
orasHomebrewgreen risk, v1.3.4narrow executable package without higher-risk signals
rustupHomebrewv1.29.1no executable entrypoint in the package index
virtualenvHomebrewv21.7.8no executable entrypoint in the package index
pipenvHomebrewgreen risk, v2026.8.0narrow executable package without higher-risk signals
goreleaserHomebrewgreen risk, v2.18.1narrow executable package without higher-risk signals
pixiHomebrewv0.79.0no executable entrypoint in the package index
asciidoctorHomebrewgreen risk, v2.0.26narrow executable package without higher-risk signals
cargo-binstallHomebrewgreen risk, v1.23.0narrow executable package without higher-risk signals
ruby-installHomebrewgreen risk, v0.10.2narrow executable package without higher-risk signals
onigmoHomebrewgreen risk, v6.2.0library-like package without higher-risk signals
cargo-cHomebrewgreen risk, v0.10.25narrow executable package without higher-risk signals
rpmHomebrewv6.1.0no executable entrypoint in the package index
dpkgHomebrewgreen risk, v1.23.7narrow executable package without higher-risk signals
cpanminusHomebrewgreen risk, v1.7049narrow executable package without higher-risk signals
maturinHomebrewv1.15.0no executable entrypoint in the package index
tmuxinatorHomebrewgreen risk, v3.4.1narrow executable package without higher-risk signals
vcpkgHomebrewgreen risk, v2026-07-27library-like package without higher-risk signals
hatchHomebrewv1.18.0no executable entrypoint in the package index
chrubyHomebrewgreen risk, v0.3.9narrow executable package without higher-risk signals
mrubyHomebrewgreen risk, v4.0.0narrow executable package without higher-risk signals
lolcatHomebrewgreen risk, v100.0.1narrow executable package without higher-risk signals
cargo-nextestHomebrewv0.9.143no executable entrypoint in the package index
npm-check-updatesHomebrewv23.1.0no executable entrypoint in the package index
melangeHomebrewv0.59.4no executable entrypoint in the package index
skillsHomebrewv1.5.23no executable entrypoint in the package index
brew-gemHomebrewv1.3.4no executable entrypoint in the package index
python-buildHomebrewgreen risk, v1.6.0narrow executable package without higher-risk signals
nfpmHomebrewgreen risk, v2.47.0narrow executable package without higher-risk signals
twineHomebrewv7.0.0no executable entrypoint in the package index
msitoolsHomebrewgreen risk, v0.106narrow executable package without higher-risk signals
mdlessHomebrewv2.1.68no executable entrypoint in the package index
mcp-publisherHomebrewv1.8.1no executable entrypoint in the package index
x-cmdHomebrewv0.10.9no executable entrypoint in the package index
cargo-editHomebrewgreen risk, v0.13.13narrow executable package without higher-risk signals
wasm-packHomebrewv0.15.0no executable entrypoint in the package index
regclientHomebrewv0.11.6no executable entrypoint in the package index
npqHomebrewv3.27.0no executable entrypoint in the package index
solargraphHomebrewv0.60.4no executable entrypoint in the package index
mcpmHomebrewv2.15.0no executable entrypoint in the package index
cpplintHomebrewgreen risk, v2.0.2narrow executable package without higher-risk signals
rbspyHomebrewv0.51.0no executable entrypoint in the package index
ansible-language-serverHomebrewv26.6.0no executable entrypoint in the package index
vsceHomebrewgreen risk, v3.9.2narrow executable package without higher-risk signals
cargo-auditHomebrewgreen risk, v0.22.2narrow executable package without higher-risk signals
cargo-updateHomebrewgreen risk, v22.1.1narrow executable package without higher-risk signals
fakerootHomebrewv2.1.4no executable entrypoint in the package index
rubyfmtHomebrewv0.14.1no executable entrypoint in the package index
pip-auditHomebrewv2.10.1no executable entrypoint in the package index
cargo-denyHomebrewv0.20.2no executable entrypoint in the package index
cargo-sweepHomebrewgreen risk, v0.8.0narrow executable package without higher-risk signals
cargo-llvm-covHomebrewv0.9.1no executable entrypoint in the package index
passengerHomebrewv6.2.0no executable entrypoint in the package index
rbenv-gemsetHomebrewgreen risk, v0.5.102narrow executable package without higher-risk signals
conda-lockHomebrewv4.0.2no executable entrypoint in the package index
appriseHomebrewv1.13.1no executable entrypoint in the package index
cargo-udepsHomebrewgreen risk, v0.1.61narrow executable package without higher-risk signals
cargo-zigbuildHomebrewgreen risk, v0.23.4narrow executable package without higher-risk signals
nuitkaHomebrewv4.2.1no executable entrypoint in the package index
jrubyHomebrewgreen risk, v10.1.1.0narrow executable package without higher-risk signals