pkg.soopen package index

topical

Security and crypto packages

Security, identity, cryptography, password, signing, and certificate-related packages.

summary

Why this package group is here

Security and crypto packages currently includes 883 package catalog entries. 0 have protected-tool coverage, 3 have approval-gate metadata, and 223 have non-low Geiger classifier findings. The grouping comes from package metadata, so it can stay current as that metadata changes.

Generated source

This hub uses the same local package data as individual package pages: pkg.so package metadata, Homebrew enrichment, Geiger classifier output, secret-handling manifests, and approval-gate seeds where available.

Review model

Use the hub to find command families that need tighter secret injection, approval gates, or manual review before agents run them.

High-signal tools

mkcert4 approval-gate rules are present.openssl@35 approval-gate rules are present.ffmpeg4 approval-gate rules are present.denodoc example: JavaScript runtimemonobroad file, network, media, or database tool signalnonogeneralized runtime or code generation signalniktobroad file, network, media, or database tool signalcrytic-compilegeneralized runtime or code generation signalponycbroad file, network, media, or database tool signalrushgeneralized runtime or code generation signalpwncatgeneralized runtime or code generation signalvshgeneralized runtime or code generation signal

Approval-gated tools

mkcert4 approval-gate rules are present.openssl@35 approval-gate rules are present.ffmpeg4 approval-gate rules are present.

Related hubs

Terminal utility packagesCommand-line utilities with local package pages, executable metadata, and Automic Vault security notes.783Homebrew utility packagesHomebrew packages with local package pages that need at least one crawlable package-graph path.701Networking and protocol packagesNetwork clients, protocol utilities, download tools, and remote-service helpers.625Source-control packagesSource-control packages can read or mutate repositories, issue trackers, release flows, and authenticated developer state.339Secret-risk packagesPackages with protected-tool coverage, approval-gate metadata, or non-low Geiger findings deserve explicit review before agents run them.230Language runtime packagesLanguage runtimes, package ecosystems, and interpreter-adjacent packages.154Web development packagesWeb servers, frontend build tools, JavaScript packages, CSS tools, and browser-adjacent utilities.139Developer build packagesBuild systems, compilers, generators, and developer tools that influence local source trees and artifacts.103

Representative package spokes

openssl@35 approval-gate rules are present.nanoidA tiny (117 bytes), secure URL-friendly unique string ID generator1password-cliCommand-line interface for 1Passwordffmpeg4 approval-gate rules are present.gnutlsGNU Transport Layer Security (TLS) LibrarygnupgGNU Privacy Guard (OpenPGP)krb5broad file, network, media, or database tool signalp11-kitlibrary-like package without higher-risk signalslibcaplibrary-like package without higher-risk signalssha.jsStreamable SHA hashes in pure javascriptlibgcryptCryptographic library based on the code from GnuPGnettleLow-level cryptographic librarydenodoc example: JavaScript runtimesafe-regex2detect possibly catastrophic, exponential-time regular expressionsopenssl@4Cryptography and SSL/TLS ToolkitnssLibraries for security-enabled client and server applications

packages

Indexed package pages

PackageManagerSignalsWhy it appears here
mkcertHomebrewapproval gate, green risk, v1.4.44 approval-gate rules are present.
openssl@3Homebrewapproval gate, v3.5.95 approval-gate rules are present.
ffmpegHomebrewapproval gate, blue risk, v9.0.24 approval-gate rules are present.
denoHomebrewyellow risk, v2.9.8doc example: JavaScript runtime
monoHomebrewyellow risk, v6.14.1broad file, network, media, or database tool signal
nonoHomebrewyellow risk, v0.81.0generalized runtime or code generation signal
niktoHomebrewyellow risk, v2.6.1broad file, network, media, or database tool signal
crytic-compileHomebrewyellow risk, v0.4.2generalized runtime or code generation signal
ponycHomebrewyellow risk, v0.77.2broad file, network, media, or database tool signal
rushHomebrewyellow risk, v2.4generalized runtime or code generation signal
pwncatHomebrewyellow risk, v0.1.2generalized runtime or code generation signal
vshHomebrewyellow risk, v1.0.0generalized runtime or code generation signal
proxifyHomebrewyellow risk, v0.0.16broad file, network, media, or database tool signal
wassetteHomebrewyellow risk, v0.8.1generalized runtime or code generation signal
rustcatHomebrewyellow risk, v3.0.0generalized runtime or code generation signal
dehydratedHomebrewyellow risk, v0.7.2broad file, network, media, or database tool signal
gnutlsHomebrewv3.8.13no executable entrypoint in the package index
gnupgHomebrewv2.5.24no executable entrypoint in the package index
p11-kitHomebrewgreen risk, v0.26.5library-like package without higher-risk signals
libcapHomebrewgreen risk, v2.78library-like package without higher-risk signals
nettleHomebrewv4.0no executable entrypoint in the package index
nssHomebrewv3.132no executable entrypoint in the package index
openldapHomebrewgreen risk, v2.7.2narrow executable package without higher-risk signals
bubblewrapHomebrewgreen risk, v0.13.1narrow executable package without higher-risk signals
pinentryHomebrewgreen risk, v1.3.3narrow executable package without higher-risk signals
gpgmeHomebrewv2.2.0no executable entrypoint in the package index
cyrus-saslHomebrewgreen risk, v2.1.28narrow executable package without higher-risk signals
llama.cppHomebrewv0.8.0no executable entrypoint in the package index
xxhashHomebrewgreen risk, v0.8.4narrow executable package without higher-risk signals
chezmoiHomebrewv2.74.0no executable entrypoint in the package index
srtHomebrewgreen risk, v1.5.7narrow executable package without higher-risk signals
gitleaksHomebrewgreen risk, v8.30.1narrow executable package without higher-risk signals
libfido2Homebrewgreen risk, v1.17.0library-like package without higher-risk signals
sopsHomebrewv3.13.3no executable entrypoint in the package index
libsecretHomebrewgreen risk, v0.21.8.2library-like package without higher-risk signals
semgrepHomebrewgreen risk, v1.183.0narrow executable package without higher-risk signals
argon2Homebrewgreen risk, v20190702library-like package without higher-risk signals
trufflehogHomebrewv3.99.8no executable entrypoint in the package index
gsaslHomebrewv2.2.4no executable entrypoint in the package index
zizmorHomebrewv1.32.0no executable entrypoint in the package index
gperfHomebrewgreen risk, v3.3narrow executable package without higher-risk signals
bitwarden-cliHomebrewv2026.10.1no executable entrypoint in the package index
aws-vaultHomebrewv7.17.5no executable entrypoint in the package index
docker-credential-helperHomebrewv0.9.12no executable entrypoint in the package index
libseccompHomebrewgreen risk, v2.6.1library-like package without higher-risk signals
jadxHomebrewgreen risk, v1.5.6narrow executable package without higher-risk signals
certbotHomebrewv5.9.0no executable entrypoint in the package index
linux-pamHomebrewgreen risk, v1.7.3narrow executable package without higher-risk signals
ldnsHomebrewgreen risk, v1.9.2library-like package without higher-risk signals
cycodeHomebrewv3.27.0no executable entrypoint in the package index
tfsecHomebrewgreen risk, v1.28.14narrow executable package without higher-risk signals
xauthHomebrewgreen risk, v1.1.5narrow executable package without higher-risk signals
istioctlHomebrewv1.31.3no executable entrypoint in the package index
pinentry-macHomebrewgreen risk, v1.3.1.1narrow executable package without higher-risk signals
ykmanHomebrewgreen risk, v5.9.2narrow executable package without higher-risk signals
kubeloginHomebrewgreen risk, v1.36.4narrow executable package without higher-risk signals
libxmlsec1Homebrewgreen risk, v1.3.13library-like package without higher-risk signals
betterleaksHomebrewv1.9.0no executable entrypoint in the package index
opaHomebrewv1.22.0no executable entrypoint in the package index
snyk-cliHomebrewv1.1308.3no executable entrypoint in the package index
openconnectHomebrewv9.21no executable entrypoint in the package index
yaraHomebrewgreen risk, v4.6.0narrow executable package without higher-risk signals
subfinderHomebrewgreen risk, v2.17.0narrow executable package without higher-risk signals
talismanHomebrewgreen risk, v1.37.0narrow executable package without higher-risk signals
dependency-checkHomebrewgreen risk, v13.0.0narrow executable package without higher-risk signals
sqlcipherHomebrewv4.20.0no executable entrypoint in the package index
stepHomebrewgreen risk, v0.31.0narrow executable package without higher-risk signals
oath-toolkitHomebrewgreen risk, v2.6.15narrow executable package without higher-risk signals
minisignHomebrewgreen risk, v0.12narrow executable package without higher-risk signals
libcap-ngHomebrewgreen risk, v0.9.6library-like package without higher-risk signals
md5sha1sumHomebrewgreen risk, v0.9.5narrow executable package without higher-risk signals
ffufHomebrewgreen risk, v2.3.0narrow executable package without higher-risk signals