Generated source
This hub uses the same local package data as individual package pages: Nucleus package metadata, Homebrew enrichment, Geiger classifier output, secret-handling manifests, and approval-gate seeds where available.
ecosystem
Package ecosystem packages
Packages that install, publish, inspect, or automate other package ecosystems.
summary
Why this package group is here
Package ecosystem packages currently includes 3866 package catalog entries. 0 have protected-tool coverage, 10 have approval-gate metadata, and 640 have non-low Geiger classifier findings. The grouping comes from package metadata, so it can stay current as that metadata changes.
Review model
Use the hub to find command families that need tighter secret injection, approval gates, or manual review before agents run them.
High-signal tools
cmake6 approval-gate rules are present.pkgconf3 approval-gate rules are present.uv6 approval-gate rules are present.xcbeautify2 approval-gate rules are present.jq3 approval-gate rules are present.gh7 approval-gate rules are present.git6 approval-gate rules are present.pyenv5 approval-gate rules are present.docker6 approval-gate rules are present.mise6 approval-gate rules are present.llvmcompiler and toolchain runtimeninjabuild system capable of executing project logic
Approval-gated tools
cmake6 approval-gate rules are present.pkgconf3 approval-gate rules are present.uv6 approval-gate rules are present.xcbeautify2 approval-gate rules are present.jq3 approval-gate rules are present.gh7 approval-gate rules are present.git6 approval-gate rules are present.pyenv5 approval-gate rules are present.
Related hubs
Representative package spokes
gh7 approval-gate rules are present.resolveresolve like require.resolve() on behalf of files asynchronously and synchronouslygliblibrary-like package without higher-risk signalspcre2library-like package without higher-risk signalsharfbuzznarrow executable package without higher-risk signalsupdate-browserslist-dbCLI tool to update caniuse-lite to refresh target browsers from Browserslist configgettextlibrary-like package without higher-risk signalsrimrafA deep deletion module for node (like rm -rf)pkgconf3 approval-gate rules are present.cmake6 approval-gate rules are present.loose-envifyFast (and loose) selective process.env replacer using js-tokens instead of an ASTuv6 approval-gate rules are present.cssescA JavaScript library for escaping CSS strings and identifiers while generating the shortest possible ASCII-only output.noptOption parsing for Node, supporting types, shorthands, etc. Used by npm.terserJavaScript parser, mangler/compressor and beautifier toolkit for ES6+ncurseslibrary-like package without higher-risk signals
packages
Indexed package pages
| Package | Manager | Signals | Why it appears here |
|---|---|---|---|
| cmake | Homebrew | approval gate, yellow risk, v4.4.2 | 6 approval-gate rules are present. |
| pkgconf | Homebrew | approval gate, green risk, v3.0.5 | 3 approval-gate rules are present. |
| uv | Homebrew | approval gate, v0.12.1 | 6 approval-gate rules are present. |
| xcbeautify | Homebrew | approval gate, green risk, v3.2.1 | 2 approval-gate rules are present. |
| jq | Homebrew | approval gate, green risk, v1.8.2 | 3 approval-gate rules are present. |
| gh | Homebrew | approval gate, blue risk, v2.97.0 | 7 approval-gate rules are present. |
| git | Homebrew | approval gate, blue risk, v2.55.0 | 6 approval-gate rules are present. |
| pyenv | Homebrew | approval gate, orange risk, v2.8.1 | 5 approval-gate rules are present. |
| docker | Homebrew | approval gate, orange risk, v29.7.1 | 6 approval-gate rules are present. |
| mise | Homebrew | approval gate, orange risk, v2026.8.0 | 6 approval-gate rules are present. |
| llvm | Homebrew | yellow risk, v22.1.8 | compiler and toolchain runtime |
| ninja | Homebrew | yellow risk, v1.13.2 | build system capable of executing project logic |
| maven | Homebrew | yellow risk, v3.9.16 | build system capable of executing project logic |
| starship | Homebrew | yellow risk, v1.26.0 | generalized runtime or code generation signal |
| shellcheck | Homebrew | yellow risk, v0.11.0 | generalized runtime or code generation signal |
| meson | Homebrew | yellow risk, v1.11.2 | build system capable of executing project logic |
| gradle | Homebrew | yellow risk, v9.6.1 | build system capable of executing project logic |
| fish | Homebrew | yellow risk, v4.8.1 | generalized runtime or code generation signal |
| zsh | Homebrew | yellow risk, v5.9.2 | doc example: shell runtime |
| mongosh | Homebrew | yellow risk, v2.9.2 | broad file, network, media, or database tool signal |
| zoxide | Homebrew | yellow risk, v0.10.0 | generalized runtime or code generation signal |
| go-task | Homebrew | yellow risk, v3.52.0 | generalized runtime or code generation signal |
| powershell | Homebrew | yellow risk, v7.6.4 | generalized runtime or code generation signal |
| doxygen | Homebrew | yellow risk, v1.17.0 | generalized runtime or code generation signal |
| httpie | Homebrew | yellow risk, v3.2.4 | generalized runtime or code generation signal |
| parallel | Homebrew | yellow risk, v20260722 | broad file, network, media, or database tool signal |
| oh-my-posh | Homebrew | yellow risk, v30.4.0 | generalized runtime or code generation signal |
| shfmt | Homebrew | yellow risk, v3.13.1 | generalized runtime or code generation signal |
| mono | Homebrew | yellow risk, v6.14.1 | broad file, network, media, or database tool signal |
| sbt | Homebrew | yellow risk, v2.0.4 | generalized runtime or code generation signal |
| gauche | Homebrew | yellow risk, v0.9.15 | generalized runtime or code generation signal |
| nano | Homebrew | yellow risk, v9.2 | generalized runtime or code generation signal |
| kcov | Homebrew | yellow risk, v43 | generalized runtime or code generation signal |
| fswatch | Homebrew | yellow risk, v1.22.0 | generalized runtime or code generation signal |
| gum | Homebrew | yellow risk, v0.17.0 | generalized runtime or code generation signal |
| chicken | Homebrew | yellow risk, v5.4.0 | generalized runtime or code generation signal |
| carapace | Homebrew | yellow risk, v1.7.3 | generalized runtime or code generation signal |
| bazel | Homebrew | yellow risk, v9.2.0 | generalized runtime or code generation signal |
| ant | Homebrew | yellow risk, v1.10.17 | generalized runtime or code generation signal |
| swift | Homebrew | yellow risk, v6.3.3 | broad file, network, media, or database tool signal |
| dialog | Homebrew | yellow risk, v1.3-20260721 | generalized runtime or code generation signal |
| jo | Homebrew | yellow risk, v1.9 | generalized runtime or code generation signal |
| create-dmg | Homebrew | yellow risk, v1.3.0 | generalized runtime or code generation signal |
| d2 | Homebrew | yellow risk, v0.7.1 | generalized runtime or code generation signal |
| texlive | Homebrew | yellow risk, v20260301 | broad file, network, media, or database tool signal |
| sd | Homebrew | yellow risk, v1.1.0 | generalized runtime or code generation signal |
| leiningen | Homebrew | yellow risk, v2.13.0 | generalized runtime or code generation signal |
| nx | Homebrew | yellow risk, v23.1.1 | generalized runtime or code generation signal |
| gitlab-ci-local | Homebrew | yellow risk, v4.74.0 | generalized runtime or code generation signal |
| wasmtime | Homebrew | yellow risk, v47.0.3 | generalized runtime or code generation signal |
| hey | Homebrew | yellow risk, v0.1.5 | broad file, network, media, or database tool signal |
| byobu | Homebrew | yellow risk, v7.15 | generalized runtime or code generation signal |
| sui | Homebrew | yellow risk, v1.76.1 | generalized runtime or code generation signal |
| staticcheck | Homebrew | yellow risk, v2026.1 | generalized runtime or code generation signal |
| rebar3 | Homebrew | yellow risk, v3.27.0 | generalized runtime or code generation signal |
| pkl | Homebrew | yellow risk, v0.32.1 | generalized runtime or code generation signal |
| sheldon | Homebrew | yellow risk, v0.8.5 | generalized runtime or code generation signal |
| xonsh | Homebrew | yellow risk, v0.24.1 | generalized runtime or code generation signal |
| scala-cli | Homebrew | yellow risk, v1.15.0 | generalized runtime or code generation signal |
| otel-cli | Homebrew | yellow risk, v0.4.5 | generalized runtime or code generation signal |
| bpython | Homebrew | yellow risk, v0.26 | generalized runtime or code generation signal |
| shellspec | Homebrew | yellow risk, v0.28.1 | generalized runtime or code generation signal |
| mcfly | Homebrew | yellow risk, v0.9.4 | generalized runtime or code generation signal |
| checkbashisms | Homebrew | yellow risk, v2.26.10 | generalized runtime or code generation signal |
| mage | Homebrew | yellow risk, v1.17.2 | generalized runtime or code generation signal |
| wxpython | Homebrew | yellow risk, v4.3.1 | broad file, network, media, or database tool signal |
| wasmer | Homebrew | yellow risk, v7.2.1 | generalized runtime or code generation signal |
| dune | Homebrew | yellow risk, v3.24.1 | generalized runtime or code generation signal |
| mill | Homebrew | yellow risk, v1.1.7 | generalized runtime or code generation signal |
| premake | Homebrew | yellow risk, v5.0.0-beta8 | generalized runtime or code generation signal |
| fish-lsp | Homebrew | yellow risk, v1.1.4 | generalized runtime or code generation signal |
| gitlogue | Homebrew | yellow risk, v0.10.0 | generalized runtime or code generation signal |