pkg.soopen package index

security

Package publisher tools

Package publishing tools can use registry tokens, sign artifacts, and push releases from an agent-controlled shell.

summary

Why this package group is here

Package publisher tools currently includes 473 package catalog entries. 0 have protected-tool coverage, 3 have approval-gate metadata, and 70 have non-low Geiger classifier findings. The grouping comes from package metadata, so it can stay current as that metadata changes.

Generated source

This hub uses the same local package data as individual package pages: pkg.so package metadata, Homebrew enrichment, Geiger classifier output, secret-handling manifests, and approval-gate seeds where available.

Review model

Use the hub to find command families that need tighter secret injection, approval gates, or manual review before agents run them.

High-signal tools

node7 approval-gate rules are present.go7 approval-gate rules are present.uv6 approval-gate rules are present.rubydoc example: interpreter runtimecreate-dmggeneralized runtime or code generation signalportable-rubygeneralized runtime or code generation signaldubgeneralized runtime or code generation signalbuild2generalized runtime or code generation signalcargo-makegeneralized runtime or code generation signalopalgeneralized runtime or code generation signalrustnarrow executable package without higher-risk signalsruby-buildInstall various Ruby versions and implementations

Approval-gated tools

node7 approval-gate rules are present.go7 approval-gate rules are present.uv6 approval-gate rules are present.

Related hubs

Terminal utility packagesCommand-line utilities with local package pages, executable metadata, and Automic Vault security notes.452Web development packagesWeb servers, frontend build tools, JavaScript packages, CSS tools, and browser-adjacent utilities.385Package ecosystem packagesPackages that install, publish, inspect, or automate other package ecosystems.329Developer build packagesBuild systems, compilers, generators, and developer tools that influence local source trees and artifacts.305Text processing packagesPackages used to inspect, transform, search, render, or generate text and structured documents.296Homebrew utility packagesHomebrew packages with local package pages that need at least one crawlable package-graph path.237npm command packagesnpm packages with local package pages and command-line or developer workflow metadata.236Language runtime packagesLanguage runtimes, package ecosystems, and interpreter-adjacent packages.212

Representative package spokes

node7 approval-gate rules are present.acornECMAScript parserbrowserslistShare target browsers between different front-end tools, like Autoprefixer, Stylelint and babel-env-presetuv6 approval-gate rules are present.baseline-browser-mappingA library for obtaining browser versions with their maximum supported Baseline feature set and Widely Available status.go7 approval-gate rules are present.noptOption parsing for Node, supporting types, shorthands, etc. Used by npm.autoprefixerParse CSS and add vendor prefixes to CSS rules using values from the Can I Use websitenapi-postinstallThe postinstall script helper for handling native bindings in legacy npm versionshuskyModern native Git hooksastringJavaScript code generator from an ESTree-compliant AST.ansi-html-communityAn elegant lib that converts the chalked (ANSI) text to HTML. (Community)rubydoc example: interpreter runtimepnpminfrastructure mutation or orchestration signalhelmKubernetes package managerrustnarrow executable package without higher-risk signals

packages

Indexed package pages

PackageManagerSignalsWhy it appears here
nodeHomebrewapproval gate, yellow risk, v26.13.07 approval-gate rules are present.
goHomebrewapproval gate, yellow risk, v1.27.37 approval-gate rules are present.
uvHomebrewapproval gate, v0.13.66 approval-gate rules are present.
rubyHomebrewyellow risk, v4.0.9doc example: interpreter runtime
create-dmgHomebrewyellow risk, v1.3.0generalized runtime or code generation signal
portable-rubyHomebrewyellow risk, v4.0.9generalized runtime or code generation signal
dubHomebrewyellow risk, v1.42.0generalized runtime or code generation signal
build2Homebrewyellow risk, v0.18.1generalized runtime or code generation signal
cargo-makeHomebrewyellow risk, v0.37.24generalized runtime or code generation signal
opalHomebrewyellow risk, v1.8.3generalized runtime or code generation signal
rustHomebrewgreen risk, v1.99.1narrow executable package without higher-risk signals
ruby-buildHomebrewv20261023no executable entrypoint in the package index
orasHomebrewgreen risk, v1.3.6narrow executable package without higher-risk signals
rustupHomebrewv1.29.2no executable entrypoint in the package index
poetryHomebrewv2.5.1no executable entrypoint in the package index
pipenvHomebrewgreen risk, v2026.10.5narrow executable package without higher-risk signals
virtualenvHomebrewv21.15.2no executable entrypoint in the package index
goreleaserHomebrewgreen risk, v2.19.0narrow executable package without higher-risk signals
pixiHomebrewv0.83.0no executable entrypoint in the package index
cargo-binstallHomebrewgreen risk, v1.26.2narrow executable package without higher-risk signals
cargo-cHomebrewgreen risk, v0.10.26narrow executable package without higher-risk signals
asciidoctorHomebrewgreen risk, v2.0.26narrow executable package without higher-risk signals
ruby-installHomebrewgreen risk, v0.10.2narrow executable package without higher-risk signals
onigmoHomebrewgreen risk, v6.2.0library-like package without higher-risk signals
maturinHomebrewv1.16.0no executable entrypoint in the package index
rpmHomebrewv6.1.0no executable entrypoint in the package index
dpkgHomebrewgreen risk, v1.23.11narrow executable package without higher-risk signals
cpanminusHomebrewgreen risk, v1.7049narrow executable package without higher-risk signals
tmuxinatorHomebrewgreen risk, v3.4.2narrow executable package without higher-risk signals
cargo-nextestHomebrewv0.9.151no executable entrypoint in the package index
mrubyHomebrewgreen risk, v4.0.0narrow executable package without higher-risk signals
vcpkgHomebrewgreen risk, v2026-10-29library-like package without higher-risk signals
hatchHomebrewv1.18.2no executable entrypoint in the package index
chrubyHomebrewgreen risk, v0.3.9narrow executable package without higher-risk signals
lolcatHomebrewgreen risk, v100.0.1narrow executable package without higher-risk signals
skillsHomebrewv1.7.4no executable entrypoint in the package index
melangeHomebrewv0.64.0no executable entrypoint in the package index
npm-check-updatesHomebrewv23.1.1no executable entrypoint in the package index
msitoolsHomebrewgreen risk, v0.106narrow executable package without higher-risk signals
mcp-publisherHomebrewv1.8.7no executable entrypoint in the package index
brew-gemHomebrewv1.3.4no executable entrypoint in the package index
python-buildHomebrewgreen risk, v1.6.1narrow executable package without higher-risk signals
wasm-packHomebrewv0.15.1no executable entrypoint in the package index
nfpmHomebrewgreen risk, v2.48.0narrow executable package without higher-risk signals
twineHomebrewv7.0.0no executable entrypoint in the package index
cargo-editHomebrewgreen risk, v0.13.14narrow executable package without higher-risk signals
mdlessHomebrewv2.1.68no executable entrypoint in the package index
regclientHomebrewv0.11.7no executable entrypoint in the package index
x-cmdHomebrewv0.10.14no executable entrypoint in the package index
solargraphHomebrewv0.62.0no executable entrypoint in the package index
npqHomebrewv3.27.2no executable entrypoint in the package index
cargo-denyHomebrewv0.20.2no executable entrypoint in the package index
cargo-auditHomebrewgreen risk, v0.22.2narrow executable package without higher-risk signals
mcpmHomebrewv2.15.0no executable entrypoint in the package index
pip-auditHomebrewv2.10.1no executable entrypoint in the package index
ansible-language-serverHomebrewv26.6.0no executable entrypoint in the package index
rubyfmtHomebrewv0.14.1no executable entrypoint in the package index
cargo-updateHomebrewgreen risk, v22.1.1narrow executable package without higher-risk signals
rbspyHomebrewv0.55.0no executable entrypoint in the package index
cpplintHomebrewgreen risk, v2.0.2narrow executable package without higher-risk signals
fakerootHomebrewv2.1.4no executable entrypoint in the package index
cargo-llvm-covHomebrewv0.9.1no executable entrypoint in the package index
vsceHomebrewgreen risk, v4.1.0narrow executable package without higher-risk signals
cargo-sweepHomebrewgreen risk, v0.8.0narrow executable package without higher-risk signals
cargo-zigbuildHomebrewgreen risk, v0.24.0narrow executable package without higher-risk signals
appriseHomebrewv2.1.0no executable entrypoint in the package index
conda-lockHomebrewv4.0.4no executable entrypoint in the package index
passengerHomebrewv6.2.1no executable entrypoint in the package index
cargo-udepsHomebrewgreen risk, v0.1.61narrow executable package without higher-risk signals
jrubyHomebrewgreen risk, v10.1.2.0narrow executable package without higher-risk signals
cargo-outdatedHomebrewgreen risk, v0.19.0narrow executable package without higher-risk signals
rbenv-gemsetHomebrewgreen risk, v0.5.102narrow executable package without higher-risk signals