# Source-control packages

Source-control packages can read or mutate repositories, issue trackers, release flows, and authenticated developer state.

- **软件包:** 438
- **受保护工具:** 0
- **审批门:** 2
- **风险:** 59
- **更新:** 2026-08-03

## 为什么存在这个软件包组

Source-control packages 当前包含 438 个生成的软件包页面。0 个有受保护工具覆盖，2 个有审批门元数据，59 个有非低级 Geiger 分类结果。分组来自软件包元数据，因此可随数据变化保持更新。

## 生成来源

此 hub 使用与单个软件包页面相同的本地数据：Nucleus 软件包元数据、Homebrew 增强数据、Geiger 分类器输出、密钥处理 manifest，以及可用的审批门种子。

## 审查模型

使用此 hub 查找在代理运行前需要更严格密钥注入、审批门或人工审查的命令族。

## 已索引的软件包页面

- [gh](https://pkg.so/zh-hans/pkg/brew/gh/) - 7 approval-gate rules are present.
- [git](https://pkg.so/zh-hans/pkg/brew/git/) - 6 approval-gate rules are present.
- [llvm](https://pkg.so/zh-hans/pkg/brew/llvm/) - compiler and toolchain runtime
- [nushell](https://pkg.so/zh-hans/pkg/brew/nushell/) - generalized runtime or code generation signal
- [texlive](https://pkg.so/zh-hans/pkg/brew/texlive/) - broad file, network, media, or database tool signal
- [gitlogue](https://pkg.so/zh-hans/pkg/brew/gitlogue/) - generalized runtime or code generation signal
- [vcprompt](https://pkg.so/zh-hans/pkg/brew/vcprompt/) - broad file, network, media, or database tool signal
- [git-if](https://pkg.so/zh-hans/pkg/brew/git-if/) - generalized runtime or code generation signal
- [glib](https://pkg.so/zh-hans/pkg/brew/glib/) - library-like package without higher-risk signals
- [libgit2](https://pkg.so/zh-hans/pkg/brew/libgit2/) - library-like package without higher-risk signals
- [glab](https://pkg.so/zh-hans/pkg/brew/glab/) - no executable entrypoint in the package index
- [git-lfs](https://pkg.so/zh-hans/pkg/brew/git-lfs/) - narrow executable package without higher-risk signals
- [lazygit](https://pkg.so/zh-hans/pkg/brew/lazygit/) - narrow executable package without higher-risk signals
- [bat](https://pkg.so/zh-hans/pkg/brew/bat/) - narrow executable package without higher-risk signals
- [actionlint](https://pkg.so/zh-hans/pkg/brew/actionlint/) - no executable entrypoint in the package index
- [pre-commit](https://pkg.so/zh-hans/pkg/brew/pre-commit/) - narrow executable package without higher-risk signals
- [gitleaks](https://pkg.so/zh-hans/pkg/brew/gitleaks/) - narrow executable package without higher-risk signals
- [git-filter-repo](https://pkg.so/zh-hans/pkg/brew/git-filter-repo/) - narrow executable package without higher-risk signals
- [git-delta](https://pkg.so/zh-hans/pkg/brew/git-delta/) - narrow executable package without higher-risk signals
- [act](https://pkg.so/zh-hans/pkg/brew/act/) - narrow executable package without higher-risk signals
- [trufflehog](https://pkg.so/zh-hans/pkg/brew/trufflehog/) - no executable entrypoint in the package index
- [git-gui](https://pkg.so/zh-hans/pkg/brew/git-gui/) - narrow executable package without higher-risk signals
- [zizmor](https://pkg.so/zh-hans/pkg/brew/zizmor/) - no executable entrypoint in the package index
- [jj](https://pkg.so/zh-hans/pkg/brew/jj/) - no executable entrypoint in the package index
- [lefthook](https://pkg.so/zh-hans/pkg/brew/lefthook/) - no executable entrypoint in the package index
- [prek](https://pkg.so/zh-hans/pkg/brew/prek/) - no executable entrypoint in the package index
- [git-flow](https://pkg.so/zh-hans/pkg/brew/git-flow/) - narrow executable package without higher-risk signals
- [tig](https://pkg.so/zh-hans/pkg/brew/tig/) - narrow executable package without higher-risk signals
- [difftastic](https://pkg.so/zh-hans/pkg/brew/difftastic/) - narrow executable package without higher-risk signals
- [mercurial](https://pkg.so/zh-hans/pkg/brew/mercurial/) - no executable entrypoint in the package index
- [worktrunk](https://pkg.so/zh-hans/pkg/brew/worktrunk/) - no executable entrypoint in the package index
- [flyway](https://pkg.so/zh-hans/pkg/brew/flyway/) - no executable entrypoint in the package index
- [repomix](https://pkg.so/zh-hans/pkg/brew/repomix/) - narrow executable package without higher-risk signals
- [commitizen](https://pkg.so/zh-hans/pkg/brew/commitizen/) - no executable entrypoint in the package index
- [talisman](https://pkg.so/zh-hans/pkg/brew/talisman/) - narrow executable package without higher-risk signals
- [diff-so-fancy](https://pkg.so/zh-hans/pkg/brew/diff-so-fancy/) - narrow executable package without higher-risk signals
- [gitui](https://pkg.so/zh-hans/pkg/brew/gitui/) - narrow executable package without higher-risk signals
- [ghq](https://pkg.so/zh-hans/pkg/brew/ghq/) - narrow executable package without higher-risk signals
- [hub](https://pkg.so/zh-hans/pkg/brew/hub/) - narrow executable package without higher-risk signals
- [repo](https://pkg.so/zh-hans/pkg/brew/repo/) - no executable entrypoint in the package index
- [bfg](https://pkg.so/zh-hans/pkg/brew/bfg/) - narrow executable package without higher-risk signals
- [tea](https://pkg.so/zh-hans/pkg/brew/tea/) - no executable entrypoint in the package index
- [github-mcp-server](https://pkg.so/zh-hans/pkg/brew/github-mcp-server/) - no executable entrypoint in the package index
- [ggshield](https://pkg.so/zh-hans/pkg/brew/ggshield/) - no executable entrypoint in the package index
- [dvc](https://pkg.so/zh-hans/pkg/brew/dvc/) - no executable entrypoint in the package index
- [jjui](https://pkg.so/zh-hans/pkg/brew/jjui/) - no executable entrypoint in the package index
- [git-svn](https://pkg.so/zh-hans/pkg/brew/git-svn/) - narrow executable package without higher-risk signals
- [gitversion](https://pkg.so/zh-hans/pkg/brew/gitversion/) - narrow executable package without higher-risk signals
- [notmuch](https://pkg.so/zh-hans/pkg/brew/notmuch/) - narrow executable package without higher-risk signals
- [claude-squad](https://pkg.so/zh-hans/pkg/brew/claude-squad/) - narrow executable package without higher-risk signals
- [git-extras](https://pkg.so/zh-hans/pkg/brew/git-extras/) - no executable entrypoint in the package index
- [grip](https://pkg.so/zh-hans/pkg/brew/grip/) - no executable entrypoint in the package index
- [git-secrets](https://pkg.so/zh-hans/pkg/brew/git-secrets/) - narrow executable package without higher-risk signals
- [backlog-md](https://pkg.so/zh-hans/pkg/brew/backlog-md/) - no executable entrypoint in the package index
- [tf-summarize](https://pkg.so/zh-hans/pkg/brew/tf-summarize/) - narrow executable package without higher-risk signals
- [gastown](https://pkg.so/zh-hans/pkg/brew/gastown/) - narrow executable package without higher-risk signals
- [git-secret](https://pkg.so/zh-hans/pkg/brew/git-secret/) - narrow executable package without higher-risk signals
- [git-cliff](https://pkg.so/zh-hans/pkg/brew/git-cliff/) - narrow executable package without higher-risk signals
- [onefetch](https://pkg.so/zh-hans/pkg/brew/onefetch/) - narrow executable package without higher-risk signals
- [git-town](https://pkg.so/zh-hans/pkg/brew/git-town/) - no executable entrypoint in the package index
- [cocogitto](https://pkg.so/zh-hans/pkg/brew/cocogitto/) - narrow executable package without higher-risk signals
- [pinact](https://pkg.so/zh-hans/pkg/brew/pinact/) - no executable entrypoint in the package index
- [gopass](https://pkg.so/zh-hans/pkg/brew/gopass/) - narrow executable package without higher-risk signals
- [git-quick-stats](https://pkg.so/zh-hans/pkg/brew/git-quick-stats/) - narrow executable package without higher-risk signals
- [git-spice](https://pkg.so/zh-hans/pkg/brew/git-spice/) - narrow executable package without higher-risk signals
- [git-format-staged](https://pkg.so/zh-hans/pkg/brew/git-format-staged/) - narrow executable package without higher-risk signals
- [mergiraf](https://pkg.so/zh-hans/pkg/brew/mergiraf/) - no executable entrypoint in the package index
- [gibo](https://pkg.so/zh-hans/pkg/brew/gibo/) - narrow executable package without higher-risk signals
- [transcrypt](https://pkg.so/zh-hans/pkg/brew/transcrypt/) - no executable entrypoint in the package index
- [git-cola](https://pkg.so/zh-hans/pkg/brew/git-cola/) - narrow executable package without higher-risk signals
- [git-remote-codecommit](https://pkg.so/zh-hans/pkg/brew/git-remote-codecommit/) - no executable entrypoint in the package index
- [serie](https://pkg.so/zh-hans/pkg/brew/serie/) - narrow executable package without higher-risk signals