# Media and graphics packages

Packages that process images, audio, video, fonts, diagrams, or other media assets.

- **Packages:** 918
- **Protected tools:** 0
- **Approval gates:** 2
- **Non-low risk:** 312
- **Updated:** 2026-08-03

## Why this package group is here

Media and graphics packages currently includes 918 package catalog entries. 0 have protected-tool coverage, 2 have approval-gate metadata, and 312 have non-low Geiger classifier findings. The grouping comes from package metadata, so it can stay current as that metadata changes.

## Generated source

This hub uses the same local package data as individual package pages: Nucleus package metadata, Homebrew enrichment, Geiger classifier output, secret-handling manifests, and approval-gate seeds where available.

## Review model

Use the hub to find command families that need tighter secret injection, approval gates, or manual review before agents run them.

## Indexed package pages

- [ffmpeg](https://pkg.so/pkg/brew/ffmpeg/) - 4 approval-gate rules are present.
- [imagemagick](https://pkg.so/pkg/brew/imagemagick/) - 5 approval-gate rules are present.
- [ghostscript](https://pkg.so/pkg/brew/ghostscript/) - generalized runtime or code generation signal
- [mesa](https://pkg.so/pkg/brew/mesa/) - generalized runtime or code generation signal
- [d2](https://pkg.so/pkg/brew/d2/) - generalized runtime or code generation signal
- [texlive](https://pkg.so/pkg/brew/texlive/) - broad file, network, media, or database tool signal
- [apache-spark](https://pkg.so/pkg/brew/apache-spark/) - broad file, network, media, or database tool signal
- [faust](https://pkg.so/pkg/brew/faust/) - broad file, network, media, or database tool signal
- [gitlogue](https://pkg.so/pkg/brew/gitlogue/) - generalized runtime or code generation signal
- [rsgain](https://pkg.so/pkg/brew/rsgain/) - generalized runtime or code generation signal
- [chuck](https://pkg.so/pkg/brew/chuck/) - broad file, network, media, or database tool signal
- [sampler](https://pkg.so/pkg/brew/sampler/) - generalized runtime or code generation signal
- [pixlet](https://pkg.so/pkg/brew/pixlet/) - generalized runtime or code generation signal
- [ctl](https://pkg.so/pkg/brew/ctl/) - generalized runtime or code generation signal
- [mplayershell](https://pkg.so/pkg/brew/mplayershell/) - generalized runtime or code generation signal
- [waffle](https://pkg.so/pkg/brew/waffle/) - generalized runtime or code generation signal
- [wireplumber](https://pkg.so/pkg/brew/wireplumber/) - generalized runtime or code generation signal
- [vorbisgain](https://pkg.so/pkg/brew/vorbisgain/) - generalized runtime or code generation signal
- [takt](https://pkg.so/pkg/brew/takt/) - generalized runtime or code generation signal
- [libpng](https://pkg.so/pkg/brew/libpng/) - library-like package without higher-risk signals
- [fontconfig](https://pkg.so/pkg/brew/fontconfig/) - narrow executable package without higher-risk signals
- [freetype](https://pkg.so/pkg/brew/freetype/) - library-like package without higher-risk signals
- [little-cms2](https://pkg.so/pkg/brew/little-cms2/) - narrow executable package without higher-risk signals
- [giflib](https://pkg.so/pkg/brew/giflib/) - library-like package without higher-risk signals
- [openjph](https://pkg.so/pkg/brew/openjph/) - no executable entrypoint in the package index
- [cairo](https://pkg.so/pkg/brew/cairo/) - library-like package without higher-risk signals
- [dav1d](https://pkg.so/pkg/brew/dav1d/) - narrow executable package without higher-risk signals
- [aom](https://pkg.so/pkg/brew/aom/) - no executable entrypoint in the package index
- [graphite2](https://pkg.so/pkg/brew/graphite2/) - narrow executable package without higher-risk signals
- [yt-dlp](https://pkg.so/pkg/brew/yt-dlp/) - no executable entrypoint in the package index
- [poppler](https://pkg.so/pkg/brew/poppler/) - no executable entrypoint in the package index
- [svt-av1](https://pkg.so/pkg/brew/svt-av1/) - narrow executable package without higher-risk signals
- [x265](https://pkg.so/pkg/brew/x265/) - narrow executable package without higher-risk signals
- [librsvg](https://pkg.so/pkg/brew/librsvg/) - no executable entrypoint in the package index
- [x264](https://pkg.so/pkg/brew/x264/) - narrow executable package without higher-risk signals
- [fribidi](https://pkg.so/pkg/brew/fribidi/) - narrow executable package without higher-risk signals
- [libheif](https://pkg.so/pkg/brew/libheif/) - no executable entrypoint in the package index
- [libavif](https://pkg.so/pkg/brew/libavif/) - library-like package without higher-risk signals
- [libbluray](https://pkg.so/pkg/brew/libbluray/) - library-like package without higher-risk signals
- [libsndfile](https://pkg.so/pkg/brew/libsndfile/) - library-like package without higher-risk signals
- [librist](https://pkg.so/pkg/brew/librist/) - no executable entrypoint in the package index
- [libraw](https://pkg.so/pkg/brew/libraw/) - library-like package without higher-risk signals
- [gtk+3](https://pkg.so/pkg/brew/gtkplus3/) - narrow executable package without higher-risk signals
- [exiftool](https://pkg.so/pkg/brew/exiftool/) - narrow executable package without higher-risk signals
- [openai-whisper](https://pkg.so/pkg/brew/openai-whisper/) - no executable entrypoint in the package index
- [assimp](https://pkg.so/pkg/brew/assimp/) - library-like package without higher-risk signals
- [opencv](https://pkg.so/pkg/brew/opencv/) - no executable entrypoint in the package index
- [jbig2dec](https://pkg.so/pkg/brew/jbig2dec/) - library-like package without higher-risk signals
- [gstreamer](https://pkg.so/pkg/brew/gstreamer/) - no executable entrypoint in the package index
- [qpdf](https://pkg.so/pkg/brew/qpdf/) - narrow executable package without higher-risk signals
- [libultrahdr](https://pkg.so/pkg/brew/libultrahdr/) - library-like package without higher-risk signals
- [ocrmypdf](https://pkg.so/pkg/brew/ocrmypdf/) - narrow executable package without higher-risk signals
- [shaderc](https://pkg.so/pkg/brew/shaderc/) - narrow executable package without higher-risk signals
- [graphicsmagick](https://pkg.so/pkg/brew/graphicsmagick/) - no executable entrypoint in the package index
- [molten-vk](https://pkg.so/pkg/brew/molten-vk/) - narrow executable package without higher-risk signals
- [vtk](https://pkg.so/pkg/brew/vtk/) - no executable entrypoint in the package index
- [glow](https://pkg.so/pkg/brew/glow/) - narrow executable package without higher-risk signals
- [glew](https://pkg.so/pkg/brew/glew/) - library-like package without higher-risk signals
- [taglib](https://pkg.so/pkg/brew/taglib/) - no executable entrypoint in the package index
- [summarize](https://pkg.so/pkg/brew/summarize/) - no executable entrypoint in the package index
- [fluid-synth](https://pkg.so/pkg/brew/fluid-synth/) - narrow executable package without higher-risk signals
- [r](https://pkg.so/pkg/brew/r/) - narrow executable package without higher-risk signals
- [typst](https://pkg.so/pkg/brew/typst/) - narrow executable package without higher-risk signals
- [gallery-dl](https://pkg.so/pkg/brew/gallery-dl/) - no executable entrypoint in the package index
- [sox](https://pkg.so/pkg/brew/sox/) - narrow executable package without higher-risk signals
- [libshout](https://pkg.so/pkg/brew/libshout/) - library-like package without higher-risk signals
- [psutils](https://pkg.so/pkg/brew/psutils/) - narrow executable package without higher-risk signals
- [pngquant](https://pkg.so/pkg/brew/pngquant/) - doc example: narrow image optimizer
- [pipewire](https://pkg.so/pkg/brew/pipewire/) - no executable entrypoint in the package index
- [tectonic](https://pkg.so/pkg/brew/tectonic/) - narrow executable package without higher-risk signals
- [chafa](https://pkg.so/pkg/brew/chafa/) - narrow executable package without higher-risk signals
- [weasyprint](https://pkg.so/pkg/brew/weasyprint/) - narrow executable package without higher-risk signals