pkg.soopen package index

security

Package publisher tools

Package publishing tools can use registry tokens, sign artifacts, and push releases from an agent-controlled shell.

summary

Why this package group is here

Package publisher tools currently includes 458 package catalog entries. 0 have protected-tool coverage, 3 have approval-gate metadata, and 70 have non-low Geiger classifier findings. The grouping comes from package metadata, so it can stay current as that metadata changes.

Generated source

This hub uses the same local package data as individual package pages: pkg.so package metadata, Homebrew enrichment, Geiger classifier output, secret-handling manifests, and approval-gate seeds where available.

Review model

Use the hub to find command families that need tighter secret injection, approval gates, or manual review before agents run them.

High-signal tools

node7 approval-gate rules are present.go7 approval-gate rules are present.uv6 approval-gate rules are present.rubydoc example: interpreter runtimecreate-dmggeneralized runtime or code generation signalportable-rubygeneralized runtime or code generation signaldubgeneralized runtime or code generation signalbuild2generalized runtime or code generation signalcargo-makegeneralized runtime or code generation signalopalgeneralized runtime or code generation signalrustnarrow executable package without higher-risk signalsruby-buildInstall various Ruby versions and implementations

Approval-gated tools

node7 approval-gate rules are present.go7 approval-gate rules are present.uv6 approval-gate rules are present.

Related hubs

Terminal utility packagesCommand-line utilities with local package pages, executable metadata, and Automic Vault security notes.445Web development packagesWeb servers, frontend build tools, JavaScript packages, CSS tools, and browser-adjacent utilities.378Package ecosystem packagesPackages that install, publish, inspect, or automate other package ecosystems.323Developer build packagesBuild systems, compilers, generators, and developer tools that influence local source trees and artifacts.302Text processing packagesPackages used to inspect, transform, search, render, or generate text and structured documents.294Homebrew utility packagesHomebrew packages with local package pages that need at least one crawlable package-graph path.238npm command packagesnpm packages with local package pages and command-line or developer workflow metadata.220Language runtime packagesLanguage runtimes, package ecosystems, and interpreter-adjacent packages.212

Representative package spokes

node7 approval-gate rules are present.acornECMAScript parserbrowserslistShare target browsers between different front-end tools, like Autoprefixer, Stylelint and babel-env-presetbaseline-browser-mappingA library for obtaining browser versions with their maximum supported Baseline feature set and Widely Available status.uv6 approval-gate rules are present.go7 approval-gate rules are present.noptOption parsing for Node, supporting types, shorthands, etc. Used by npm.autoprefixerParse CSS and add vendor prefixes to CSS rules using values from the Can I Use websitenapi-postinstallThe postinstall script helper for handling native bindings in legacy npm versionshuskyModern native Git hooksastringJavaScript code generator from an ESTree-compliant AST.rubydoc example: interpreter runtimeansi-html-communityAn elegant lib that converts the chalked (ANSI) text to HTML. (Community)pnpminfrastructure mutation or orchestration signalhelmKubernetes package managerrustnarrow executable package without higher-risk signals

packages

Indexed package pages

PackageManagerSignalsWhy it appears here
nodeHomebrewapproval gate, yellow risk, v26.9.07 approval-gate rules are present.
goHomebrewapproval gate, yellow risk, v1.27.17 approval-gate rules are present.
uvHomebrewapproval gate, v0.12.166 approval-gate rules are present.
rubyHomebrewyellow risk, v4.0.7doc example: interpreter runtime
create-dmgHomebrewyellow risk, v1.3.0generalized runtime or code generation signal
portable-rubyHomebrewyellow risk, v4.0.7generalized runtime or code generation signal
dubHomebrewyellow risk, v1.42.0generalized runtime or code generation signal
build2Homebrewyellow risk, v0.18.1generalized runtime or code generation signal
cargo-makeHomebrewyellow risk, v0.37.24generalized runtime or code generation signal
opalHomebrewyellow risk, v1.8.3generalized runtime or code generation signal
rustHomebrewgreen risk, v1.98.1narrow executable package without higher-risk signals
ruby-buildHomebrewv20260917no executable entrypoint in the package index
orasHomebrewgreen risk, v1.3.4narrow executable package without higher-risk signals
poetryHomebrewv2.4.3no executable entrypoint in the package index
rustupHomebrewv1.29.1no executable entrypoint in the package index
virtualenvHomebrewv21.7.10no executable entrypoint in the package index
pipenvHomebrewgreen risk, v2026.8.0narrow executable package without higher-risk signals
goreleaserHomebrewgreen risk, v2.18.2narrow executable package without higher-risk signals
pixiHomebrewv0.81.0no executable entrypoint in the package index
asciidoctorHomebrewgreen risk, v2.0.26narrow executable package without higher-risk signals
cargo-binstallHomebrewgreen risk, v1.23.0narrow executable package without higher-risk signals
ruby-installHomebrewgreen risk, v0.10.2narrow executable package without higher-risk signals
onigmoHomebrewgreen risk, v6.2.0library-like package without higher-risk signals
rpmHomebrewv6.1.0no executable entrypoint in the package index
cargo-cHomebrewgreen risk, v0.10.25narrow executable package without higher-risk signals
dpkgHomebrewgreen risk, v1.23.11narrow executable package without higher-risk signals
cpanminusHomebrewgreen risk, v1.7049narrow executable package without higher-risk signals
maturinHomebrewv1.15.0no executable entrypoint in the package index
tmuxinatorHomebrewgreen risk, v3.4.1narrow executable package without higher-risk signals
vcpkgHomebrewgreen risk, v2026-07-27library-like package without higher-risk signals
hatchHomebrewv1.18.1no executable entrypoint in the package index
mrubyHomebrewgreen risk, v4.0.0narrow executable package without higher-risk signals
chrubyHomebrewgreen risk, v0.3.9narrow executable package without higher-risk signals
cargo-nextestHomebrewv0.9.145no executable entrypoint in the package index
lolcatHomebrewgreen risk, v100.0.1narrow executable package without higher-risk signals
npm-check-updatesHomebrewv23.1.0no executable entrypoint in the package index
skillsHomebrewv1.6.0no executable entrypoint in the package index
melangeHomebrewv0.61.0no executable entrypoint in the package index
brew-gemHomebrewv1.3.4no executable entrypoint in the package index
python-buildHomebrewgreen risk, v1.6.1narrow executable package without higher-risk signals
nfpmHomebrewgreen risk, v2.47.0narrow executable package without higher-risk signals
msitoolsHomebrewgreen risk, v0.106narrow executable package without higher-risk signals
twineHomebrewv7.0.0no executable entrypoint in the package index
mdlessHomebrewv2.1.68no executable entrypoint in the package index
mcp-publisherHomebrewv1.8.1no executable entrypoint in the package index
cargo-editHomebrewgreen risk, v0.13.13narrow executable package without higher-risk signals
x-cmdHomebrewv0.10.10no executable entrypoint in the package index
wasm-packHomebrewv0.15.0no executable entrypoint in the package index
regclientHomebrewv0.11.6no executable entrypoint in the package index
npqHomebrewv3.27.0no executable entrypoint in the package index
solargraphHomebrewv0.60.4no executable entrypoint in the package index
mcpmHomebrewv2.15.0no executable entrypoint in the package index
cpplintHomebrewgreen risk, v2.0.2narrow executable package without higher-risk signals
rbspyHomebrewv0.52.0no executable entrypoint in the package index
ansible-language-serverHomebrewv26.6.0no executable entrypoint in the package index
vsceHomebrewgreen risk, v4.0.0narrow executable package without higher-risk signals
cargo-auditHomebrewgreen risk, v0.22.2narrow executable package without higher-risk signals
cargo-updateHomebrewgreen risk, v22.1.1narrow executable package without higher-risk signals
fakerootHomebrewv2.1.4no executable entrypoint in the package index
rubyfmtHomebrewv0.14.1no executable entrypoint in the package index
pip-auditHomebrewv2.10.1no executable entrypoint in the package index
cargo-denyHomebrewv0.20.2no executable entrypoint in the package index
cargo-sweepHomebrewgreen risk, v0.8.0narrow executable package without higher-risk signals
cargo-llvm-covHomebrewv0.9.1no executable entrypoint in the package index
passengerHomebrewv6.2.0no executable entrypoint in the package index
conda-lockHomebrewv4.0.2no executable entrypoint in the package index
appriseHomebrewv1.13.1no executable entrypoint in the package index
cargo-udepsHomebrewgreen risk, v0.1.61narrow executable package without higher-risk signals
cargo-zigbuildHomebrewgreen risk, v0.23.4narrow executable package without higher-risk signals
rbenv-gemsetHomebrewgreen risk, v0.5.102narrow executable package without higher-risk signals
nuitkaHomebrewv4.2.1no executable entrypoint in the package index
jrubyHomebrewgreen risk, v10.1.1.0narrow executable package without higher-risk signals