pkg.soopen package index

security

Source-control packages

Source-control packages can read or mutate repositories, issue trackers, release flows, and authenticated developer state.

summary

Why this package group is here

Source-control packages currently includes 3420 package catalog entries. 0 have protected-tool coverage, 7 have approval-gate metadata, and 884 have non-low Geiger classifier findings. The grouping comes from package metadata, so it can stay current as that metadata changes.

Generated source

This hub uses the same local package data as individual package pages: pkg.so package metadata, Homebrew enrichment, Geiger classifier output, secret-handling manifests, and approval-gate seeds where available.

Review model

Use the hub to find command families that need tighter secret injection, approval gates, or manual review before agents run them.

High-signal tools

pkgconf3 approval-gate rules are present.xcbeautify2 approval-gate rules are present.jq3 approval-gate rules are present.mkcert4 approval-gate rules are present.gh7 approval-gate rules are present.git6 approval-gate rules are present.pyenv5 approval-gate rules are present.llvmcompiler and toolchain runtimeutil-linuxgeneralized runtime or code generation signalzoxidegeneralized runtime or code generation signalpowershellgeneralized runtime or code generation signalshfmtgeneralized runtime or code generation signal

Approval-gated tools

pkgconf3 approval-gate rules are present.xcbeautify2 approval-gate rules are present.jq3 approval-gate rules are present.mkcert4 approval-gate rules are present.gh7 approval-gate rules are present.git6 approval-gate rules are present.pyenv5 approval-gate rules are present.

Related hubs

Terminal utility packagesCommand-line utilities with local package pages, executable metadata, and Automic Vault security notes.3,360Homebrew utility packagesHomebrew packages with local package pages that need at least one crawlable package-graph path.3,287Text processing packagesPackages used to inspect, transform, search, render, or generate text and structured documents.1,819Web development packagesWeb servers, frontend build tools, JavaScript packages, CSS tools, and browser-adjacent utilities.1,665Developer build packagesBuild systems, compilers, generators, and developer tools that influence local source trees and artifacts.1,632Networking and protocol packagesNetwork clients, protocol utilities, download tools, and remote-service helpers.1,619Package ecosystem packagesPackages that install, publish, inspect, or automate other package ecosystems.1,582Secret-risk packagesPackages with protected-tool coverage, approval-gate metadata, or non-low Geiger findings deserve explicit review before agents run them.1,040

Representative package spokes

gh7 approval-gate rules are present.zstdbroad file, network, media, or database tool signalgliblibrary-like package without higher-risk signalsharfbuzznarrow executable package without higher-risk signalslz4broad file, network, media, or database tool signalpkgconf3 approval-gate rules are present.git6 approval-gate rules are present.brotlibroad file, network, media, or database tool signalexpatXML 1.0 parserp11-kitlibrary-like package without higher-risk signalsopenjphOpen-source implementation of JPEG2000 Part-15 (or JPH or HTJ2K)llvmcompiler and toolchain runtimehuskyModern native Git hookspyenv5 approval-gate rules are present.xcbeautify2 approval-gate rules are present.lint-stagedLint files staged by git

packages

Indexed package pages

PackageManagerSignalsWhy it appears here
pkgconfHomebrewapproval gate, green risk, v3.0.53 approval-gate rules are present.
xcbeautifyHomebrewapproval gate, green risk, v3.2.12 approval-gate rules are present.
jqHomebrewapproval gate, green risk, v1.8.23 approval-gate rules are present.
mkcertHomebrewapproval gate, green risk, v1.4.44 approval-gate rules are present.
ghHomebrewapproval gate, blue risk, v2.97.07 approval-gate rules are present.
gitHomebrewapproval gate, blue risk, v2.55.06 approval-gate rules are present.
pyenvHomebrewapproval gate, orange risk, v2.8.15 approval-gate rules are present.
llvmHomebrewyellow risk, v22.1.8compiler and toolchain runtime
util-linuxHomebrewyellow risk, v2.42.2generalized runtime or code generation signal
zoxideHomebrewyellow risk, v0.10.0generalized runtime or code generation signal
powershellHomebrewyellow risk, v7.6.4generalized runtime or code generation signal
shfmtHomebrewyellow risk, v3.13.1generalized runtime or code generation signal
nushellHomebrewyellow risk, v0.114.1generalized runtime or code generation signal
crunHomebrewyellow risk, v1.28generalized runtime or code generation signal
kcovHomebrewyellow risk, v43generalized runtime or code generation signal
fswatchHomebrewyellow risk, v1.22.0generalized runtime or code generation signal
gumHomebrewyellow risk, v0.17.0generalized runtime or code generation signal
joHomebrewyellow risk, v1.9generalized runtime or code generation signal
create-dmgHomebrewyellow risk, v1.3.0generalized runtime or code generation signal
texliveHomebrewyellow risk, v20260301broad file, network, media, or database tool signal
procsHomebrewyellow risk, v0.14.12generalized runtime or code generation signal
sdHomebrewyellow risk, v1.1.0generalized runtime or code generation signal
autojumpHomebrewyellow risk, v22.5.3generalized runtime or code generation signal
gitlab-ci-localHomebrewyellow risk, v4.74.0generalized runtime or code generation signal
heyHomebrewyellow risk, v0.1.5broad file, network, media, or database tool signal
luajit-openrestyHomebrewyellow risk, v2.1-20260724generalized runtime or code generation signal
otel-cliHomebrewyellow risk, v0.4.5generalized runtime or code generation signal
crytic-compileHomebrewyellow risk, v0.4.2generalized runtime or code generation signal
aws-shellHomebrewyellow risk, v0.2.2generalized runtime or code generation signal
docker-agentHomebrewyellow risk, v1.120.0generalized runtime or code generation signal
mcflyHomebrewyellow risk, v0.9.4generalized runtime or code generation signal
cpu_featuresHomebrewyellow risk, v0.11.0generalized runtime or code generation signal
screenfetchHomebrewyellow risk, v3.9.9generalized runtime or code generation signal
premakeHomebrewyellow risk, v5.0.0-beta8generalized runtime or code generation signal
tursoHomebrewyellow risk, v0.7.2generalized runtime or code generation signal
gitlogueHomebrewyellow risk, v0.10.0generalized runtime or code generation signal
scooterHomebrewyellow risk, v0.9.1generalized runtime or code generation signal
rofiHomebrewyellow risk, v2.0.0generalized runtime or code generation signal
vpn-sliceHomebrewyellow risk, v0.16.1generalized runtime or code generation signal
powerline-goHomebrewyellow risk, v1.26generalized runtime or code generation signal
rsgainHomebrewyellow risk, v3.7generalized runtime or code generation signal
shcHomebrewyellow risk, v4.0.3generalized runtime or code generation signal
fstrmHomebrewyellow risk, v0.6.1broad file, network, media, or database tool signal
libnfcHomebrewyellow risk, v1.8.0generalized runtime or code generation signal
fobisHomebrewyellow risk, v3.8.22generalized runtime or code generation signal
ptpythonHomebrewyellow risk, v3.0.32generalized runtime or code generation signal
compiledbHomebrewyellow risk, v0.10.7broad file, network, media, or database tool signal
intelli-shellHomebrewyellow risk, v3.4.5generalized runtime or code generation signal
erlang-language-platformHomebrewyellow risk, v2026-02-27broad file, network, media, or database tool signal
dafnyHomebrewyellow risk, v4.11.0generalized runtime or code generation signal
fastmodHomebrewyellow risk, v0.4.4generalized runtime or code generation signal
pgstreamHomebrewyellow risk, v1.3.1generalized runtime or code generation signal
sadHomebrewyellow risk, v0.4.32generalized runtime or code generation signal
rplHomebrewyellow risk, v2.1.0generalized runtime or code generation signal
gimmeHomebrewyellow risk, v1.5.6generalized runtime or code generation signal
luneHomebrewyellow risk, v0.10.5generalized runtime or code generation signal
taskshHomebrewyellow risk, v1.2.0generalized runtime or code generation signal
ocamlbuildHomebrewyellow risk, v0.16.1generalized runtime or code generation signal
serplHomebrewyellow risk, v0.3.6generalized runtime or code generation signal
xxhHomebrewyellow risk, v0.8.14broad file, network, media, or database tool signal
pixletHomebrewyellow risk, v0.53.1generalized runtime or code generation signal
evaHomebrewyellow risk, v0.3.1generalized runtime or code generation signal
ctlHomebrewyellow risk, v1.5.5generalized runtime or code generation signal
litaniHomebrewyellow risk, v1.29.0generalized runtime or code generation signal
vcpromptHomebrewyellow risk, v1.3.0broad file, network, media, or database tool signal
pypHomebrewyellow risk, v1.3.0generalized runtime or code generation signal
wasm-micro-runtimeHomebrewyellow risk, v2.4.5generalized runtime or code generation signal
beakerlibHomebrewyellow risk, v1.33.3generalized runtime or code generation signal
qqqaHomebrewyellow risk, v1.0.1generalized runtime or code generation signal
boot-cljHomebrewyellow risk, v2.8.3generalized runtime or code generation signal
brainfuckHomebrewyellow risk, v2.7.3generalized runtime or code generation signal
nfdumpHomebrewyellow risk, v1.7.8generalized runtime or code generation signal