# Source-control packages

Source-control packages can read or mutate repositories, issue trackers, release flows, and authenticated developer state.

- **Packages:** 3,420
- **Protected tools:** 0
- **Approval gates:** 7
- **Non-low risk:** 884
- **Updated:** 2026-08-04

## Why this package group is here

Source-control packages currently includes 3420 package catalog entries. 0 have protected-tool coverage, 7 have approval-gate metadata, and 884 have non-low Geiger classifier findings. The grouping comes from package metadata, so it can stay current as that metadata changes.

## Generated source

This hub uses the same local package data as individual package pages: pkg.so package metadata, Homebrew enrichment, Geiger classifier output, secret-handling manifests, and approval-gate seeds where available.

## Review model

Use the hub to find command families that need tighter secret injection, approval gates, or manual review before agents run them.

## Indexed package pages

- [pkgconf](https://pkg.so/brew/pkgconf/) - 3 approval-gate rules are present.
- [xcbeautify](https://pkg.so/brew/xcbeautify/) - 2 approval-gate rules are present.
- [jq](https://pkg.so/brew/jq/) - 3 approval-gate rules are present.
- [mkcert](https://pkg.so/brew/mkcert/) - 4 approval-gate rules are present.
- [gh](https://pkg.so/brew/gh/) - 7 approval-gate rules are present.
- [git](https://pkg.so/brew/git/) - 6 approval-gate rules are present.
- [pyenv](https://pkg.so/brew/pyenv/) - 5 approval-gate rules are present.
- [llvm](https://pkg.so/brew/llvm/) - compiler and toolchain runtime
- [util-linux](https://pkg.so/brew/util-linux/) - generalized runtime or code generation signal
- [zoxide](https://pkg.so/brew/zoxide/) - generalized runtime or code generation signal
- [powershell](https://pkg.so/brew/powershell/) - generalized runtime or code generation signal
- [shfmt](https://pkg.so/brew/shfmt/) - generalized runtime or code generation signal
- [nushell](https://pkg.so/brew/nushell/) - generalized runtime or code generation signal
- [crun](https://pkg.so/brew/crun/) - generalized runtime or code generation signal
- [kcov](https://pkg.so/brew/kcov/) - generalized runtime or code generation signal
- [fswatch](https://pkg.so/brew/fswatch/) - generalized runtime or code generation signal
- [gum](https://pkg.so/brew/gum/) - generalized runtime or code generation signal
- [jo](https://pkg.so/brew/jo/) - generalized runtime or code generation signal
- [create-dmg](https://pkg.so/brew/create-dmg/) - generalized runtime or code generation signal
- [texlive](https://pkg.so/brew/texlive/) - broad file, network, media, or database tool signal
- [procs](https://pkg.so/brew/procs/) - generalized runtime or code generation signal
- [sd](https://pkg.so/brew/sd/) - generalized runtime or code generation signal
- [autojump](https://pkg.so/brew/autojump/) - generalized runtime or code generation signal
- [gitlab-ci-local](https://pkg.so/brew/gitlab-ci-local/) - generalized runtime or code generation signal
- [hey](https://pkg.so/brew/hey/) - broad file, network, media, or database tool signal
- [luajit-openresty](https://pkg.so/brew/luajit-openresty/) - generalized runtime or code generation signal
- [otel-cli](https://pkg.so/brew/otel-cli/) - generalized runtime or code generation signal
- [crytic-compile](https://pkg.so/brew/crytic-compile/) - generalized runtime or code generation signal
- [aws-shell](https://pkg.so/brew/aws-shell/) - generalized runtime or code generation signal
- [docker-agent](https://pkg.so/brew/docker-agent/) - generalized runtime or code generation signal
- [mcfly](https://pkg.so/brew/mcfly/) - generalized runtime or code generation signal
- [cpu_features](https://pkg.so/brew/cpu-features/) - generalized runtime or code generation signal
- [screenfetch](https://pkg.so/brew/screenfetch/) - generalized runtime or code generation signal
- [premake](https://pkg.so/brew/premake/) - generalized runtime or code generation signal
- [turso](https://pkg.so/brew/turso/) - generalized runtime or code generation signal
- [gitlogue](https://pkg.so/brew/gitlogue/) - generalized runtime or code generation signal
- [scooter](https://pkg.so/brew/scooter/) - generalized runtime or code generation signal
- [rofi](https://pkg.so/brew/rofi/) - generalized runtime or code generation signal
- [vpn-slice](https://pkg.so/brew/vpn-slice/) - generalized runtime or code generation signal
- [powerline-go](https://pkg.so/brew/powerline-go/) - generalized runtime or code generation signal
- [rsgain](https://pkg.so/brew/rsgain/) - generalized runtime or code generation signal
- [shc](https://pkg.so/brew/shc/) - generalized runtime or code generation signal
- [fstrm](https://pkg.so/brew/fstrm/) - broad file, network, media, or database tool signal
- [libnfc](https://pkg.so/brew/libnfc/) - generalized runtime or code generation signal
- [fobis](https://pkg.so/brew/fobis/) - generalized runtime or code generation signal
- [ptpython](https://pkg.so/brew/ptpython/) - generalized runtime or code generation signal
- [compiledb](https://pkg.so/brew/compiledb/) - broad file, network, media, or database tool signal
- [intelli-shell](https://pkg.so/brew/intelli-shell/) - generalized runtime or code generation signal
- [erlang-language-platform](https://pkg.so/brew/erlang-language-platform/) - broad file, network, media, or database tool signal
- [dafny](https://pkg.so/brew/dafny/) - generalized runtime or code generation signal
- [fastmod](https://pkg.so/brew/fastmod/) - generalized runtime or code generation signal
- [pgstream](https://pkg.so/brew/pgstream/) - generalized runtime or code generation signal
- [sad](https://pkg.so/brew/sad/) - generalized runtime or code generation signal
- [rpl](https://pkg.so/brew/rpl/) - generalized runtime or code generation signal
- [gimme](https://pkg.so/brew/gimme/) - generalized runtime or code generation signal
- [lune](https://pkg.so/brew/lune/) - generalized runtime or code generation signal
- [tasksh](https://pkg.so/brew/tasksh/) - generalized runtime or code generation signal
- [ocamlbuild](https://pkg.so/brew/ocamlbuild/) - generalized runtime or code generation signal
- [serpl](https://pkg.so/brew/serpl/) - generalized runtime or code generation signal
- [xxh](https://pkg.so/brew/xxh/) - broad file, network, media, or database tool signal
- [pixlet](https://pkg.so/brew/pixlet/) - generalized runtime or code generation signal
- [eva](https://pkg.so/brew/eva/) - generalized runtime or code generation signal
- [ctl](https://pkg.so/brew/ctl/) - generalized runtime or code generation signal
- [litani](https://pkg.so/brew/litani/) - generalized runtime or code generation signal
- [vcprompt](https://pkg.so/brew/vcprompt/) - broad file, network, media, or database tool signal
- [pyp](https://pkg.so/brew/pyp/) - generalized runtime or code generation signal
- [wasm-micro-runtime](https://pkg.so/brew/wasm-micro-runtime/) - generalized runtime or code generation signal
- [beakerlib](https://pkg.so/brew/beakerlib/) - generalized runtime or code generation signal
- [qqqa](https://pkg.so/brew/qqqa/) - generalized runtime or code generation signal
- [boot-clj](https://pkg.so/brew/boot-clj/) - generalized runtime or code generation signal
- [brainfuck](https://pkg.so/brew/brainfuck/) - generalized runtime or code generation signal
- [nfdump](https://pkg.so/brew/nfdump/) - generalized runtime or code generation signal