pkg.soopen package index

topical

Security and crypto packages

Security, identity, cryptography, password, signing, and certificate-related packages.

summary

Why this package group is here

Security and crypto packages currently includes 868 package catalog entries. 0 have protected-tool coverage, 3 have approval-gate metadata, and 223 have non-low Geiger classifier findings. The grouping comes from package metadata, so it can stay current as that metadata changes.

Generated source

This hub uses the same local package data as individual package pages: pkg.so package metadata, Homebrew enrichment, Geiger classifier output, secret-handling manifests, and approval-gate seeds where available.

Review model

Use the hub to find command families that need tighter secret injection, approval gates, or manual review before agents run them.

High-signal tools

mkcert4 approval-gate rules are present.openssl@35 approval-gate rules are present.ffmpeg4 approval-gate rules are present.denodoc example: JavaScript runtimemonobroad file, network, media, or database tool signalniktobroad file, network, media, or database tool signalnonogeneralized runtime or code generation signalcrytic-compilegeneralized runtime or code generation signalponycbroad file, network, media, or database tool signalrushgeneralized runtime or code generation signalpwncatgeneralized runtime or code generation signalvshgeneralized runtime or code generation signal

Approval-gated tools

mkcert4 approval-gate rules are present.openssl@35 approval-gate rules are present.ffmpeg4 approval-gate rules are present.

Related hubs

Terminal utility packagesCommand-line utilities with local package pages, executable metadata, and Automic Vault security notes.780Homebrew utility packagesHomebrew packages with local package pages that need at least one crawlable package-graph path.701Networking and protocol packagesNetwork clients, protocol utilities, download tools, and remote-service helpers.627Source-control packagesSource-control packages can read or mutate repositories, issue trackers, release flows, and authenticated developer state.338Secret-risk packagesPackages with protected-tool coverage, approval-gate metadata, or non-low Geiger findings deserve explicit review before agents run them.229Language runtime packagesLanguage runtimes, package ecosystems, and interpreter-adjacent packages.151Web development packagesWeb servers, frontend build tools, JavaScript packages, CSS tools, and browser-adjacent utilities.136Developer build packagesBuild systems, compilers, generators, and developer tools that influence local source trees and artifacts.103

Representative package spokes

openssl@35 approval-gate rules are present.nanoidA tiny (118 bytes), secure URL-friendly unique string ID generator1password-cliCommand-line interface for 1Passwordffmpeg4 approval-gate rules are present.gnutlsGNU Transport Layer Security (TLS) Libraryp11-kitlibrary-like package without higher-risk signalsgnupgGNU Privacy Guard (OpenPGP)krb5broad file, network, media, or database tool signallibcaplibrary-like package without higher-risk signalssha.jsStreamable SHA hashes in pure javascriptnettleLow-level cryptographic librarylibgcryptCryptographic library based on the code from GnuPGsafe-regex2detect possibly catastrophic, exponential-time regular expressionsdenodoc example: JavaScript runtimemkcert4 approval-gate rules are present.nssLibraries for security-enabled client and server applications

packages

Indexed package pages

PackageManagerSignalsWhy it appears here
mkcertHomebrewapproval gate, green risk, v1.4.44 approval-gate rules are present.
openssl@3Homebrewapproval gate, v3.6.45 approval-gate rules are present.
ffmpegHomebrewapproval gate, blue risk, v9.0.14 approval-gate rules are present.
denoHomebrewyellow risk, v2.9.6doc example: JavaScript runtime
monoHomebrewyellow risk, v6.14.1broad file, network, media, or database tool signal
niktoHomebrewyellow risk, v2.6.1broad file, network, media, or database tool signal
nonoHomebrewyellow risk, v0.75.0generalized runtime or code generation signal
crytic-compileHomebrewyellow risk, v0.4.2generalized runtime or code generation signal
ponycHomebrewyellow risk, v0.70.0broad file, network, media, or database tool signal
rushHomebrewyellow risk, v2.4generalized runtime or code generation signal
pwncatHomebrewyellow risk, v0.1.2generalized runtime or code generation signal
vshHomebrewyellow risk, v1.0.0generalized runtime or code generation signal
wassetteHomebrewyellow risk, v0.7.0generalized runtime or code generation signal
proxifyHomebrewyellow risk, v0.0.16broad file, network, media, or database tool signal
rustcatHomebrewyellow risk, v3.0.0generalized runtime or code generation signal
dehydratedHomebrewyellow risk, v0.7.2broad file, network, media, or database tool signal
gnutlsHomebrewv3.8.13no executable entrypoint in the package index
p11-kitHomebrewgreen risk, v0.26.5library-like package without higher-risk signals
gnupgHomebrewv2.5.22no executable entrypoint in the package index
libcapHomebrewgreen risk, v2.78library-like package without higher-risk signals
nettleHomebrewv4.0no executable entrypoint in the package index
nssHomebrewv3.128no executable entrypoint in the package index
openldapHomebrewgreen risk, v2.7.0narrow executable package without higher-risk signals
bubblewrapHomebrewgreen risk, v0.12.0narrow executable package without higher-risk signals
pinentryHomebrewgreen risk, v1.3.3narrow executable package without higher-risk signals
gpgmeHomebrewv2.2.0no executable entrypoint in the package index
cyrus-saslHomebrewgreen risk, v2.1.28narrow executable package without higher-risk signals
llama.cppHomebrewv0.3.0no executable entrypoint in the package index
xxhashHomebrewgreen risk, v0.8.3narrow executable package without higher-risk signals
srtHomebrewgreen risk, v1.5.7narrow executable package without higher-risk signals
chezmoiHomebrewv2.72.1no executable entrypoint in the package index
sopsHomebrewv3.13.3no executable entrypoint in the package index
libfido2Homebrewgreen risk, v1.17.0library-like package without higher-risk signals
gitleaksHomebrewgreen risk, v8.30.1narrow executable package without higher-risk signals
libsecretHomebrewgreen risk, v0.21.7library-like package without higher-risk signals
semgrepHomebrewgreen risk, v1.176.0narrow executable package without higher-risk signals
argon2Homebrewgreen risk, v20190702library-like package without higher-risk signals
gsaslHomebrewv2.2.4no executable entrypoint in the package index
trufflehogHomebrewv3.97.4no executable entrypoint in the package index
zizmorHomebrewv1.30.0no executable entrypoint in the package index
gperfHomebrewgreen risk, v3.3narrow executable package without higher-risk signals
aws-vaultHomebrewv7.13.6no executable entrypoint in the package index
bitwarden-cliHomebrewv2026.8.0no executable entrypoint in the package index
certbotHomebrewv5.8.0no executable entrypoint in the package index
libseccompHomebrewgreen risk, v2.6.1library-like package without higher-risk signals
docker-credential-helperHomebrewv0.9.9no executable entrypoint in the package index
jadxHomebrewgreen risk, v1.5.6narrow executable package without higher-risk signals
ldnsHomebrewgreen risk, v1.9.2library-like package without higher-risk signals
linux-pamHomebrewgreen risk, v1.7.2narrow executable package without higher-risk signals
tfsecHomebrewgreen risk, v1.28.14narrow executable package without higher-risk signals
xauthHomebrewgreen risk, v1.1.5narrow executable package without higher-risk signals
pinentry-macHomebrewgreen risk, v1.3.1.1narrow executable package without higher-risk signals
istioctlHomebrewv1.31.0no executable entrypoint in the package index
cycodeHomebrewv3.22.0no executable entrypoint in the package index
kubeloginHomebrewgreen risk, v1.36.3narrow executable package without higher-risk signals
ykmanHomebrewgreen risk, v5.9.2narrow executable package without higher-risk signals
libxmlsec1Homebrewgreen risk, v1.3.12library-like package without higher-risk signals
snyk-cliHomebrewv1.1307.0no executable entrypoint in the package index
opaHomebrewv1.20.2no executable entrypoint in the package index
openconnectHomebrewv9.21no executable entrypoint in the package index
dependency-checkHomebrewgreen risk, v13.0.0narrow executable package without higher-risk signals
talismanHomebrewgreen risk, v1.37.0narrow executable package without higher-risk signals
md5sha1sumHomebrewgreen risk, v0.9.5narrow executable package without higher-risk signals
betterleaksHomebrewv1.8.1no executable entrypoint in the package index
subfinderHomebrewgreen risk, v2.16.0narrow executable package without higher-risk signals
yaraHomebrewgreen risk, v4.5.8narrow executable package without higher-risk signals
stepHomebrewgreen risk, v0.30.6narrow executable package without higher-risk signals
saml2awsHomebrewgreen risk, v2.36.19narrow executable package without higher-risk signals
oath-toolkitHomebrewgreen risk, v2.6.14narrow executable package without higher-risk signals
libcap-ngHomebrewgreen risk, v0.9.5library-like package without higher-risk signals
sqlcipherHomebrewv4.18.0no executable entrypoint in the package index
minisignHomebrewgreen risk, v0.12narrow executable package without higher-risk signals