Generated source
This hub uses the same local package data as individual package pages: Nucleus package metadata, Homebrew enrichment, Geiger classifier output, secret-handling manifests, and approval-gate seeds where available.
ecosystem
Package ecosystem packages
Packages that install, publish, inspect, or automate other package ecosystems.
summary
Why this package group is here
Package ecosystem packages currently includes 4306 package catalog entries. 0 have protected-tool coverage, 11 have approval-gate metadata, and 673 have non-low Geiger classifier findings. The grouping comes from package metadata, so it can stay current as that metadata changes.
Review model
Use the hub to find command families that need tighter secret injection, approval gates, or manual review before agents run them.
High-signal tools
cmake6 approval-gate rules are present.gemini-cli5 approval-gate rules are present.jq3 approval-gate rules are present.pkgconf3 approval-gate rules are present.uv6 approval-gate rules are present.xcbeautify2 approval-gate rules are present.docker6 approval-gate rules are present.gh7 approval-gate rules are present.git6 approval-gate rules are present.mise6 approval-gate rules are present.pyenv5 approval-gate rules are present.aliaegeneralized runtime or code generation signal
Approval-gated tools
cmake6 approval-gate rules are present.gemini-cli5 approval-gate rules are present.jq3 approval-gate rules are present.pkgconf3 approval-gate rules are present.uv6 approval-gate rules are present.xcbeautify2 approval-gate rules are present.docker6 approval-gate rules are present.gh7 approval-gate rules are present.
Related hubs
Representative package spokes
semverThe semantic version parser used by npm.uuidRFC9562 UUIDsesbuildAn extremely fast JavaScript and CSS bundler and minifier.resolveresolve like require.resolve() on behalf of files asynchronously and synchronouslyupdate-browserslist-dbCLI tool to update caniuse-lite to refresh target browsers from Browserslist configrimrafA deep deletion module for node (like rm -rf)eslintAn AST-based pattern checker for JavaScript.viteNative-ESM powered web dev build toolrollupNext-generation ES module bundlerloose-envifyFast (and loose) selective process.env replacer using js-tokens instead of an ASTpnpmFast, disk space efficient package managercssescA JavaScript library for escaping CSS strings and identifiers while generating the shortest possible ASCII-only output.noptOption parsing for Node, supporting types, shorthands, etc. Used by npm.terserJavaScript parser, mangler/compressor and beautifier toolkit for ES6+tsxTypeScript Execute (tsx): Node.js enhanced with esbuild to run TypeScript & ESM filesvitestNext generation testing framework powered by Vite
packages
Indexed package pages
| Package | Manager | Signals | Why it appears here |
|---|---|---|---|
| cmake | Homebrew | approval gate, yellow risk, v4.4.0 | 6 approval-gate rules are present. |
| gemini-cli | Homebrew | approval gate, v0.46.0 | 5 approval-gate rules are present. |
| jq | Homebrew | approval gate, green risk, v1.8.2 | 3 approval-gate rules are present. |
| pkgconf | Homebrew | approval gate, green risk, v2.5.1 | 3 approval-gate rules are present. |
| uv | Homebrew | approval gate, v0.11.28 | 6 approval-gate rules are present. |
| xcbeautify | Homebrew | approval gate, green risk, v3.2.1 | 2 approval-gate rules are present. |
| docker | Homebrew | approval gate, orange risk, v29.6.1 | 6 approval-gate rules are present. |
| gh | Homebrew | approval gate, blue risk, v2.96.0 | 7 approval-gate rules are present. |
| git | Homebrew | approval gate, blue risk, v2.55.0 | 6 approval-gate rules are present. |
| mise | Homebrew | approval gate, orange risk, v2026.7.5 | 6 approval-gate rules are present. |
| pyenv | Homebrew | approval gate, orange risk, v2.7.3 | 5 approval-gate rules are present. |
| aliae | Homebrew | yellow risk, v0.26.6 | generalized runtime or code generation signal |
| ant | Homebrew | yellow risk, v1.10.17 | generalized runtime or code generation signal |
| bam | Homebrew | yellow risk, v0.5.1 | generalized runtime or code generation signal |
| bar | Homebrew | yellow risk, v1.4 | generalized runtime or code generation signal |
| bazel | Homebrew | yellow risk, v9.1.1 | generalized runtime or code generation signal |
| beakerlib | Homebrew | yellow risk, v1.33.3 | generalized runtime or code generation signal |
| bold | Homebrew | yellow risk, v0.2.0 | generalized runtime or code generation signal |
| boot-clj | Homebrew | yellow risk, v2.8.3 | generalized runtime or code generation signal |
| bpython | Homebrew | yellow risk, v0.26 | generalized runtime or code generation signal |
| brpc | Homebrew | yellow risk, v1.17.0 | broad file, network, media, or database tool signal |
| bsdmake | Homebrew | yellow risk, v24 | generalized runtime or code generation signal |
| build2 | Homebrew | yellow risk, v0.18.1 | generalized runtime or code generation signal |
| bunster | Homebrew | yellow risk, v0.14.0 | generalized runtime or code generation signal |
| byobu | Homebrew | yellow risk, v7.15 | generalized runtime or code generation signal |
| carapace | Homebrew | yellow risk, v1.7.3 | generalized runtime or code generation signal |
| cargo-make | Homebrew | yellow risk, v0.37.24 | generalized runtime or code generation signal |
| checkbashisms | Homebrew | yellow risk, v2.26.10 | generalized runtime or code generation signal |
| chicken | Homebrew | yellow risk, v5.4.0 | generalized runtime or code generation signal |
| clarinet | Homebrew | yellow risk, v3.21.1 | generalized runtime or code generation signal |
| compiledb | Homebrew | yellow risk, v0.10.7 | broad file, network, media, or database tool signal |
| crash | Homebrew | yellow risk, v1.3.2 | generalized runtime or code generation signal |
| create-dmg | Homebrew | yellow risk, v1.3.0 | generalized runtime or code generation signal |
| crystal-icr | Homebrew | yellow risk, v0.9.0 | generalized runtime or code generation signal |
| d2 | Homebrew | yellow risk, v0.7.1 | generalized runtime or code generation signal |
| dafny | Homebrew | yellow risk, v4.11.0 | generalized runtime or code generation signal |
| dcd | Homebrew | yellow risk, v0.16.2 | broad file, network, media, or database tool signal |
| desk | Homebrew | yellow risk, v0.6.0 | generalized runtime or code generation signal |
| dialog | Homebrew | yellow risk, v1.3-20260107 | generalized runtime or code generation signal |
| docker-agent | Homebrew | yellow risk, v1.103.0 | generalized runtime or code generation signal |
| doxygen | Homebrew | yellow risk, v1.17.0 | generalized runtime or code generation signal |
| dtools | Homebrew | yellow risk, v2.112.0 | generalized runtime or code generation signal |
| dub | Homebrew | yellow risk, v1.41.0 | generalized runtime or code generation signal |
| dune | Homebrew | yellow risk, v3.24.0 | generalized runtime or code generation signal |
| empty | Homebrew | yellow risk, v0.6.23d | generalized runtime or code generation signal |
| envv | Homebrew | yellow risk, v1.7 | generalized runtime or code generation signal |
| erlang-language-platform | Homebrew | yellow risk, v2026-02-27 | broad file, network, media, or database tool signal |
| eva | Homebrew | yellow risk, v0.3.1 | generalized runtime or code generation signal |
| fastbuild | Homebrew | yellow risk, v1.20 | generalized runtime or code generation signal |
| fastmod | Homebrew | yellow risk, v0.4.4 | generalized runtime or code generation signal |
| fish | Homebrew | yellow risk, v4.8.0 | generalized runtime or code generation signal |
| fish-lsp | Homebrew | yellow risk, v1.1.4 | generalized runtime or code generation signal |
| fobis | Homebrew | yellow risk, v3.8.22 | generalized runtime or code generation signal |
| fstrm | Homebrew | yellow risk, v0.6.1 | broad file, network, media, or database tool signal |
| fswatch | Homebrew | yellow risk, v1.21.0 | generalized runtime or code generation signal |
| gammaray | Homebrew | yellow risk, v3.4.0 | generalized runtime or code generation signal |
| gauche | Homebrew | yellow risk, v0.9.15 | generalized runtime or code generation signal |
| gimme | Homebrew | yellow risk, v1.5.6 | generalized runtime or code generation signal |
| gitlab-ci-local | Homebrew | yellow risk, v4.73.0 | generalized runtime or code generation signal |
| gitlogue | Homebrew | yellow risk, v0.9.0 | generalized runtime or code generation signal |
| go-task | Homebrew | yellow risk, v3.52.0 | generalized runtime or code generation signal |
| gor | Homebrew | yellow risk, v1.3.3 | broad file, network, media, or database tool signal |
| goredo | Homebrew | yellow risk, v2.9.2 | generalized runtime or code generation signal |
| gradle | Homebrew | yellow risk, v9.6.1 | build system capable of executing project logic |
| grails | Homebrew | yellow risk, v7.2.0 | generalized runtime or code generation signal |
| gsar | Homebrew | yellow risk, v1.51 | generalized runtime or code generation signal |
| gum | Homebrew | yellow risk, v0.17.0 | generalized runtime or code generation signal |
| hey | Homebrew | yellow risk, v0.1.5 | broad file, network, media, or database tool signal |
| hishtory | Homebrew | yellow risk, v0.335 | broad file, network, media, or database tool signal |
| historian | Homebrew | yellow risk, v0.0.2 | broad file, network, media, or database tool signal |
| httpie | Homebrew | yellow risk, v3.2.4 | generalized runtime or code generation signal |
| jhiccup | Homebrew | yellow risk, v2.0.10 | generalized runtime or code generation signal |