pkg.sopackage field notes

security

Source-control packages

Source-control packages can read or mutate repositories, issue trackers, release flows, and authenticated developer state.

summary

Why this package group is here

Source-control packages currently includes 323 package catalog entries. 0 have protected-tool coverage, 2 have approval-gate metadata, and 59 have non-low Geiger classifier findings. The grouping comes from package metadata, so it can stay current as that metadata changes.

Generated source

This hub uses the same local package data as individual package pages: Nucleus package metadata, Homebrew enrichment, Geiger classifier output, secret-handling manifests, and approval-gate seeds where available.

Review model

Use the hub to find command families that need tighter secret injection, approval gates, or manual review before agents run them.

High-signal tools

gh7 approval-gate rules are present.git6 approval-gate rules are present.llvmcompiler and toolchain runtimenushellgeneralized runtime or code generation signaltexlivebroad file, network, media, or database tool signalgitloguegeneralized runtime or code generation signalvcpromptbroad file, network, media, or database tool signalgit-ifgeneralized runtime or code generation signalgliblibrary-like package without higher-risk signalslibgit2library-like package without higher-risk signalsglabOpen-source GitLab command-line toolgit-lfsnarrow executable package without higher-risk signals

Approval-gated tools

gh7 approval-gate rules are present.git6 approval-gate rules are present.

Related hubs

Homebrew utility packagesHomebrew packages with local package pages that need at least one crawlable package-graph path.323Terminal utility packagesCommand-line utilities with local package pages, executable metadata, and Automic Vault security notes.320Text processing packagesPackages used to inspect, transform, search, render, or generate text and structured documents.261Developer build packagesBuild systems, compilers, generators, and developer tools that influence local source trees and artifacts.258Web development packagesWeb servers, frontend build tools, JavaScript packages, CSS tools, and browser-adjacent utilities.254Package ecosystem packagesPackages that install, publish, inspect, or automate other package ecosystems.252Language runtime packagesLanguage runtimes, package ecosystems, and interpreter-adjacent packages.61Secret-risk packagesPackages with protected-tool coverage, approval-gate metadata, or non-low Geiger findings deserve explicit review before agents run them.59

Representative package spokes

gh7 approval-gate rules are present.gliblibrary-like package without higher-risk signalsgit6 approval-gate rules are present.llvmcompiler and toolchain runtimelibgit2library-like package without higher-risk signalsglabOpen-source GitLab command-line toolgit-lfsnarrow executable package without higher-risk signalslazygitnarrow executable package without higher-risk signalsbatnarrow executable package without higher-risk signalsactionlintStatic checker for GitHub Actions workflow filestrivybroad file, network, media, or database tool signalpre-commitnarrow executable package without higher-risk signalsgitleaksnarrow executable package without higher-risk signalsgit-filter-reponarrow executable package without higher-risk signalsgit-deltanarrow executable package without higher-risk signalsactnarrow executable package without higher-risk signals

packages

Indexed package pages

PackageManagerSignalsWhy it appears here
ghHomebrewapproval gate, blue risk, v2.97.07 approval-gate rules are present.
gitHomebrewapproval gate, blue risk, v2.55.06 approval-gate rules are present.
llvmHomebrewyellow risk, v22.1.8compiler and toolchain runtime
nushellHomebrewyellow risk, v0.114.1generalized runtime or code generation signal
texliveHomebrewyellow risk, v20260301broad file, network, media, or database tool signal
gitlogueHomebrewyellow risk, v0.10.0generalized runtime or code generation signal
vcpromptHomebrewyellow risk, v1.3.0broad file, network, media, or database tool signal
git-ifHomebrewyellow risk, v1.3.8generalized runtime or code generation signal
glibHomebrewgreen risk, v2.88.3library-like package without higher-risk signals
libgit2Homebrewgreen risk, v1.9.6library-like package without higher-risk signals
glabHomebrewv1.111.0no executable entrypoint in the package index
git-lfsHomebrewgreen risk, v3.7.1narrow executable package without higher-risk signals
lazygitHomebrewgreen risk, v0.63.1narrow executable package without higher-risk signals
batHomebrewgreen risk, v0.26.1narrow executable package without higher-risk signals
actionlintHomebrewv1.7.12no executable entrypoint in the package index
pre-commitHomebrewgreen risk, v4.6.1narrow executable package without higher-risk signals
gitleaksHomebrewgreen risk, v8.30.1narrow executable package without higher-risk signals
git-filter-repoHomebrewgreen risk, v2.47.0narrow executable package without higher-risk signals
git-deltaHomebrewgreen risk, v0.19.2narrow executable package without higher-risk signals
actHomebrewgreen risk, v0.2.89narrow executable package without higher-risk signals
trufflehogHomebrewv3.96.0no executable entrypoint in the package index
git-guiHomebrewgreen risk, v2.55.0narrow executable package without higher-risk signals
zizmorHomebrewv1.29.0no executable entrypoint in the package index
jjHomebrewv0.43.0no executable entrypoint in the package index
lefthookHomebrewv2.1.10no executable entrypoint in the package index
prekHomebrewv0.4.11no executable entrypoint in the package index
git-flowHomebrewgreen risk, v0.4.1narrow executable package without higher-risk signals
tigHomebrewgreen risk, v2.6.1narrow executable package without higher-risk signals
difftasticHomebrewgreen risk, v0.69.0narrow executable package without higher-risk signals
mercurialHomebrewv7.2.3no executable entrypoint in the package index
worktrunkHomebrewv0.71.0no executable entrypoint in the package index
flywayHomebrewv13.1.0no executable entrypoint in the package index
repomixHomebrewgreen risk, v1.17.0narrow executable package without higher-risk signals
commitizenHomebrewv4.17.0no executable entrypoint in the package index
talismanHomebrewgreen risk, v1.37.0narrow executable package without higher-risk signals
diff-so-fancyHomebrewgreen risk, v1.4.12narrow executable package without higher-risk signals
gituiHomebrewgreen risk, v0.28.1narrow executable package without higher-risk signals
ghqHomebrewgreen risk, v1.10.1narrow executable package without higher-risk signals
hubHomebrewgreen risk, v2.14.2narrow executable package without higher-risk signals
repoHomebrewv2.65no executable entrypoint in the package index
bfgHomebrewgreen risk, v1.15.0narrow executable package without higher-risk signals
teaHomebrewv0.15.0no executable entrypoint in the package index
github-mcp-serverHomebrewv1.8.0no executable entrypoint in the package index
ggshieldHomebrewv1.53.0no executable entrypoint in the package index
dvcHomebrewv3.67.1no executable entrypoint in the package index
jjuiHomebrewv0.10.9no executable entrypoint in the package index
git-svnHomebrewgreen risk, v2.55.0narrow executable package without higher-risk signals
gitversionHomebrewgreen risk, v6.8.2narrow executable package without higher-risk signals
notmuchHomebrewgreen risk, v0.40narrow executable package without higher-risk signals
claude-squadHomebrewgreen risk, v1.0.19narrow executable package without higher-risk signals
git-extrasHomebrewv7.5.0no executable entrypoint in the package index
gripHomebrewv4.6.2no executable entrypoint in the package index
git-secretsHomebrewgreen risk, v1.3.0narrow executable package without higher-risk signals
backlog-mdHomebrewv1.48.0no executable entrypoint in the package index
tf-summarizeHomebrewgreen risk, v0.3.20narrow executable package without higher-risk signals
gastownHomebrewgreen risk, v1.1.0narrow executable package without higher-risk signals
git-cliffHomebrewgreen risk, v2.13.1narrow executable package without higher-risk signals
git-secretHomebrewgreen risk, v0.5.0narrow executable package without higher-risk signals
onefetchHomebrewgreen risk, v2.27.1narrow executable package without higher-risk signals
git-townHomebrewv24.0.0no executable entrypoint in the package index
cocogittoHomebrewgreen risk, v7.0.0narrow executable package without higher-risk signals
pinactHomebrewv4.1.1no executable entrypoint in the package index
gopassHomebrewgreen risk, v1.16.1narrow executable package without higher-risk signals
git-quick-statsHomebrewgreen risk, v2.11.0narrow executable package without higher-risk signals
git-spiceHomebrewgreen risk, v0.31.2narrow executable package without higher-risk signals
git-format-stagedHomebrewgreen risk, v4.0.1narrow executable package without higher-risk signals
mergirafHomebrewv0.18.0no executable entrypoint in the package index
giboHomebrewgreen risk, v3.0.22narrow executable package without higher-risk signals
transcryptHomebrewv2.3.2no executable entrypoint in the package index
git-colaHomebrewgreen risk, v4.19.0narrow executable package without higher-risk signals
git-remote-codecommitHomebrewv1.17no executable entrypoint in the package index
serieHomebrewgreen risk, v0.8.1narrow executable package without higher-risk signals