# Package publisher tools

Package publishing tools can use registry tokens, sign artifacts, and push releases from an agent-controlled shell.

- **Packages:** 448
- **Protected tools:** 0
- **Approval gates:** 3
- **Non-low risk:** 69
- **Updated:** 2026-08-03

## Why this package group is here

Package publisher tools currently includes 448 package catalog entries. 0 have protected-tool coverage, 3 have approval-gate metadata, and 69 have non-low Geiger classifier findings. The grouping comes from package metadata, so it can stay current as that metadata changes.

## Generated source

This hub uses the same local package data as individual package pages: Nucleus package metadata, Homebrew enrichment, Geiger classifier output, secret-handling manifests, and approval-gate seeds where available.

## Review model

Use the hub to find command families that need tighter secret injection, approval gates, or manual review before agents run them.

## Indexed package pages

- [node](https://pkg.so/pkg/brew/node/) - 7 approval-gate rules are present.
- [go](https://pkg.so/pkg/brew/go/) - 7 approval-gate rules are present.
- [uv](https://pkg.so/pkg/brew/uv/) - 6 approval-gate rules are present.
- [ruby](https://pkg.so/pkg/brew/ruby/) - doc example: interpreter runtime
- [create-dmg](https://pkg.so/pkg/brew/create-dmg/) - generalized runtime or code generation signal
- [portable-ruby](https://pkg.so/pkg/brew/portable-ruby/) - generalized runtime or code generation signal
- [dub](https://pkg.so/pkg/brew/dub/) - generalized runtime or code generation signal
- [build2](https://pkg.so/pkg/brew/build2/) - generalized runtime or code generation signal
- [cargo-make](https://pkg.so/pkg/brew/cargo-make/) - generalized runtime or code generation signal
- [opal](https://pkg.so/pkg/brew/opal/) - generalized runtime or code generation signal
- [rust](https://pkg.so/pkg/brew/rust/) - narrow executable package without higher-risk signals
- [ruby-build](https://pkg.so/pkg/brew/ruby-build/) - no executable entrypoint in the package index
- [poetry](https://pkg.so/pkg/brew/poetry/) - no executable entrypoint in the package index
- [oras](https://pkg.so/pkg/brew/oras/) - narrow executable package without higher-risk signals
- [rustup](https://pkg.so/pkg/brew/rustup/) - no executable entrypoint in the package index
- [virtualenv](https://pkg.so/pkg/brew/virtualenv/) - no executable entrypoint in the package index
- [pipenv](https://pkg.so/pkg/brew/pipenv/) - narrow executable package without higher-risk signals
- [goreleaser](https://pkg.so/pkg/brew/goreleaser/) - narrow executable package without higher-risk signals
- [pixi](https://pkg.so/pkg/brew/pixi/) - no executable entrypoint in the package index
- [ruby-install](https://pkg.so/pkg/brew/ruby-install/) - narrow executable package without higher-risk signals
- [cargo-binstall](https://pkg.so/pkg/brew/cargo-binstall/) - narrow executable package without higher-risk signals
- [asciidoctor](https://pkg.so/pkg/brew/asciidoctor/) - narrow executable package without higher-risk signals
- [cargo-c](https://pkg.so/pkg/brew/cargo-c/) - narrow executable package without higher-risk signals
- [onigmo](https://pkg.so/pkg/brew/onigmo/) - library-like package without higher-risk signals
- [dpkg](https://pkg.so/pkg/brew/dpkg/) - narrow executable package without higher-risk signals
- [cpanminus](https://pkg.so/pkg/brew/cpanminus/) - narrow executable package without higher-risk signals
- [rpm](https://pkg.so/pkg/brew/rpm/) - no executable entrypoint in the package index
- [tmuxinator](https://pkg.so/pkg/brew/tmuxinator/) - narrow executable package without higher-risk signals
- [vcpkg](https://pkg.so/pkg/brew/vcpkg/) - library-like package without higher-risk signals
- [maturin](https://pkg.so/pkg/brew/maturin/) - no executable entrypoint in the package index
- [chruby](https://pkg.so/pkg/brew/chruby/) - narrow executable package without higher-risk signals
- [lolcat](https://pkg.so/pkg/brew/lolcat/) - narrow executable package without higher-risk signals
- [hatch](https://pkg.so/pkg/brew/hatch/) - no executable entrypoint in the package index
- [mruby](https://pkg.so/pkg/brew/mruby/) - narrow executable package without higher-risk signals
- [cargo-nextest](https://pkg.so/pkg/brew/cargo-nextest/) - no executable entrypoint in the package index
- [npm-check-updates](https://pkg.so/pkg/brew/npm-check-updates/) - no executable entrypoint in the package index
- [brew-gem](https://pkg.so/pkg/brew/brew-gem/) - no executable entrypoint in the package index
- [melange](https://pkg.so/pkg/brew/melange/) - no executable entrypoint in the package index
- [python-build](https://pkg.so/pkg/brew/python-build/) - narrow executable package without higher-risk signals
- [skills](https://pkg.so/pkg/brew/skills/) - no executable entrypoint in the package index
- [nfpm](https://pkg.so/pkg/brew/nfpm/) - narrow executable package without higher-risk signals
- [twine](https://pkg.so/pkg/brew/twine/) - no executable entrypoint in the package index
- [mdless](https://pkg.so/pkg/brew/mdless/) - no executable entrypoint in the package index
- [regclient](https://pkg.so/pkg/brew/regclient/) - no executable entrypoint in the package index
- [x-cmd](https://pkg.so/pkg/brew/x-cmd/) - no executable entrypoint in the package index
- [cargo-edit](https://pkg.so/pkg/brew/cargo-edit/) - narrow executable package without higher-risk signals
- [mcpm](https://pkg.so/pkg/brew/mcpm/) - no executable entrypoint in the package index
- [wasm-pack](https://pkg.so/pkg/brew/wasm-pack/) - no executable entrypoint in the package index
- [mcp-publisher](https://pkg.so/pkg/brew/mcp-publisher/) - no executable entrypoint in the package index
- [npq](https://pkg.so/pkg/brew/npq/) - no executable entrypoint in the package index
- [msitools](https://pkg.so/pkg/brew/msitools/) - narrow executable package without higher-risk signals
- [solargraph](https://pkg.so/pkg/brew/solargraph/) - no executable entrypoint in the package index
- [rbspy](https://pkg.so/pkg/brew/rbspy/) - no executable entrypoint in the package index
- [ansible-language-server](https://pkg.so/pkg/brew/ansible-language-server/) - no executable entrypoint in the package index
- [vsce](https://pkg.so/pkg/brew/vsce/) - narrow executable package without higher-risk signals
- [rubyfmt](https://pkg.so/pkg/brew/rubyfmt/) - no executable entrypoint in the package index
- [cargo-update](https://pkg.so/pkg/brew/cargo-update/) - narrow executable package without higher-risk signals
- [fakeroot](https://pkg.so/pkg/brew/fakeroot/) - no executable entrypoint in the package index
- [cargo-audit](https://pkg.so/pkg/brew/cargo-audit/) - narrow executable package without higher-risk signals
- [cargo-sweep](https://pkg.so/pkg/brew/cargo-sweep/) - narrow executable package without higher-risk signals
- [cargo-deny](https://pkg.so/pkg/brew/cargo-deny/) - no executable entrypoint in the package index
- [rbenv-gemset](https://pkg.so/pkg/brew/rbenv-gemset/) - narrow executable package without higher-risk signals
- [passenger](https://pkg.so/pkg/brew/passenger/) - no executable entrypoint in the package index
- [cargo-llvm-cov](https://pkg.so/pkg/brew/cargo-llvm-cov/) - no executable entrypoint in the package index
- [conda-lock](https://pkg.so/pkg/brew/conda-lock/) - no executable entrypoint in the package index
- [cargo-udeps](https://pkg.so/pkg/brew/cargo-udeps/) - narrow executable package without higher-risk signals
- [jruby](https://pkg.so/pkg/brew/jruby/) - narrow executable package without higher-risk signals
- [nuitka](https://pkg.so/pkg/brew/nuitka/) - no executable entrypoint in the package index
- [cargo-outdated](https://pkg.so/pkg/brew/cargo-outdated/) - narrow executable package without higher-risk signals
- [youplot](https://pkg.so/pkg/brew/youplot/) - narrow executable package without higher-risk signals
- [cargo-zigbuild](https://pkg.so/pkg/brew/cargo-zigbuild/) - narrow executable package without higher-risk signals
- [cargo-instruments](https://pkg.so/pkg/brew/cargo-instruments/) - no executable entrypoint in the package index