Generated source
This hub uses the same local package data as individual package pages: Nucleus package metadata, Homebrew enrichment, Geiger classifier output, radioisotope manifests, and approval-gate seeds where available.
runtime surfaces
Language runtime packages
Language runtimes, package ecosystems, and interpreter-adjacent packages.
summary
Why this package group is here
Language runtime packages currently includes 70 generated package pages. 0 have radioisotope coverage, 0 have approval-gate metadata, and 2 have non-low Geiger classifier findings. The grouping comes from package metadata, so it can stay current as that metadata changes.
Review model
Use the hub to find command families that need tighter secret injection, approval gates, or manual review before agents run them.
packages
Indexed package pages
| Package | Manager | Signals | Why it appears here |
|---|---|---|---|
| nvm | Homebrew | green risk, v0.40.4 | no executable entrypoint in the package index |
| jenv | Homebrew | green risk, v0.6.0 | narrow executable package without higher-risk signals |
| chibi-scheme | Homebrew | green risk, v0.12 | narrow executable package without higher-risk signals |
| n | Homebrew | green risk, v10.2.0 | narrow executable package without higher-risk signals |
| xsv | Homebrew | green risk | narrow executable package without higher-risk signals |
| janet | Homebrew | green risk, v1.41.2 | narrow executable package without higher-risk signals |
| quickjs | Homebrew | green risk, v2025-09-13-2 | narrow executable package without higher-risk signals |
| nodeenv | Homebrew | green risk, v1.10.0 | narrow executable package without higher-risk signals |
| imessage-ruby | Homebrew | green risk, v0.4.0 | narrow executable package without higher-risk signals |
| gnu-go | Homebrew | green risk, v3.8 | narrow executable package without higher-risk signals |
| gvp | Homebrew | green risk, v0.3.0 | narrow executable package without higher-risk signals |
| pypy3.9 | Homebrew | green risk | narrow executable package without higher-risk signals |
| nave | Homebrew | green risk, v3.5.6 | narrow executable package without higher-risk signals |
| clzip | Homebrew | green risk, v1.16 | narrow executable package without higher-risk signals |
| gollum | Homebrew | green risk | narrow executable package without higher-risk signals |
| pyflow | Homebrew | green risk | narrow executable package without higher-risk signals |
| grap | Homebrew | green risk, v1.49 | narrow executable package without higher-risk signals |
| dpic | Homebrew | green risk, v2025.08.01 | narrow executable package without higher-risk signals |
| gokart | Homebrew | green risk | narrow executable package without higher-risk signals |
| chakra | Homebrew | green risk | narrow executable package without higher-risk signals |
| tsx | npm | v4.22.3 | TypeScript Execute (tsx): Node.js enhanced with esbuild to run TypeScript & ESM files |
| workerd | npm | v1.20260526.1 | 👷 workerd, Cloudflare's JavaScript/Wasm Runtime |
| @typescript/native-preview | npm | v7.0.0-dev.20260526.1 | Preview CLI and JS API for the native TypeScript compiler port |
| edge-runtime | npm | v4.0.1 | Run any Edge Function from CLI or Node.js module. |
| vercel | npm | v54.4.1 | The command-line interface for Vercel |
| tsc-watch | npm | v7.2.0 | The TypeScript compiler with onSuccess command |
| snyk | npm | v1.1305.0 | snyk library and cli utility |
| bestzip | npm | v3.0.1 | Uses OS zip command if available (for better performance and speed) or node.js version if there is no system command available. Can be call… |
| env-runner | npm | v0.1.9 | Generic environment runner for JavaScript runtimes. |
| apollo | npm | v2.34.0 | Command line tool for Apollo GraphQL |
| @railway/cli | npm | v4.64.0 | Develop and deploy code with zero configuration |
| regenerator | npm | v0.14.12 | Source transformer enabling ECMAScript 6 generator functions (yield) in JavaScript-of-today (ES5) |
| opencollective | npm | v1.0.3 | Official Command Line Interface for Open Collective |
| @microsoft/m365agentstoolkit-cli | npm | v1.1.11 | Microsoft 365 Agents Toolkit CLI |
| pa11y-ci | npm | v4.1.1 | Pa11y CI is a CI-centric accessibility test runner, built using Pa11y |
| clean-modules | npm | v4.0.0 | Saves space by removing redundant files from your node_modules. Useful for CI caches or reducing the size of serverless functions. |
| httpsnippet | npm | v3.0.10 | HTTP Request snippet generator for *most* languages |
| fluent-transpiler | npm | v0.5.0 | Transpile Fluent (ftl) files into optimized, tree-shakable, JavaScript EcmaScript Modules (esm). |
| @backstage/cli-module-info | npm | v0.1.2 | CLI module for Backstage CLI |
| @backstage/cli-module-translations | npm | v0.1.2 | CLI module for Backstage CLI |
| @backstage/cli-module-migrate | npm | v0.1.2 | CLI module for Backstage CLI |
| @backstage/cli-module-maintenance | npm | v0.1.2 | CLI module for Backstage CLI |
| ruvector | npm | v0.2.26 | Self-learning vector database for Node.js — hybrid search, Graph RAG, FlashAttention-3, HNSW, 50+ attention mechanisms |
| @e2b/cli | npm | v2.10.2 | CLI for managing e2b sandbox templates |
| speedcurve | npm | v2.0.10 | Official SpeedCurve CLI and Node.js API. |
| mproj | npm | v0.1.3 | A JavaScript port of the Proj.4 cartographic projections library |
| node-red-admin | npm | v4.1.6 | The Node-RED admin command line interface |
| appwright | npm | v0.1.45 | E2E mobile app testing done right, with the Playwright test runner |
| mochapack | npm | v2.1.5 | mocha cli with webpack support |
| alpic | npm | v1.129.3 | The command-line interface for Alpic |
| mocha-webpack | npm | v1.1.0 | mocha cli with webpack support |
| skybridge | npm | v1.0.2 | Skybridge is a framework for building ChatGPT and MCP Apps |
| claude-flow | npm | v3.10.3 | Ruflo - Enterprise AI agent orchestration for Claude Code. Deploy 60+ specialized agents in coordinated swarms with self-learning, fault-to… |
| @graphql-mesh/compose-cli | npm | v1.5.32 | Executable aliases include mesh-compose. |
| @forge/cli | npm | v12.21.0 | A command line interface for managing Atlassian-hosted apps |
| stmux | npm | v1.8.11 | Simple Terminal Multiplexing for Node Environments |
| cc-viewer | npm | v1.6.277 | Claude Code Logger visualization management tool |
| release | npm | v6.3.1 | Generate changelogs with a single command |
| windmill-cli | npm | v1.711.0 | CLI for Windmill |
| rust-just | npm | v1.51.0 | 🤖 Just a command runner |
| cp-cli | npm | v2.0.0 | A 'cp' CLI util for Node.js |
| svg2vectordrawable | npm | v2.9.1 | JavaScript module and command-line tools for convert SVG to Android vector drawable. |
| bull-repl | npm | v0.29.1 | Bull / BullMQ queue command line REPL |
| brittle | npm | v4.0.0 | A TAP test runner built for Bare runtime and Node.js |
| llama.rn | npm | v0.12.4 | React Native binding of llama.cpp |
| cdktn-cli | npm | v0.23.2 | CDK Terrain CLI |
| @front-ops/domino | npm | v1.3.0 | True Affected - Semantic change detection for monorepos |
| ruff-lsp | Homebrew | blue risk | broad file, network, media, or database tool signal |
| gx | Homebrew | orange risk | infrastructure mutation or orchestration signal |
| psycopg2 | PyPI | v2.9.12 | psycopg2 - Python-PostgreSQL Database Adapter |