Automic VaultAutomic Vault

security

Package publisher tools

Package publishing tools can use registry tokens, sign artifacts, and push releases from an agent-controlled shell.

summary

Why this package group is here

Package publisher tools currently includes 360 package catalog entries. 0 have protected-tool coverage, 3 have approval-gate metadata, and 72 have non-low Geiger classifier findings. The grouping comes from package metadata, so it can stay current as that metadata changes.

Generated source

This hub uses the same local package data as individual package pages: Nucleus package metadata, Homebrew enrichment, Geiger classifier output, secret-handling manifests, and approval-gate seeds where available.

Review model

Use the hub to find command families that need tighter secret injection, approval gates, or manual review before agents run them.

High-signal tools

go7 approval-gate rules are present.node7 approval-gate rules are present.uv6 approval-gate rules are present.build2generalized runtime or code generation signalbunstergeneralized runtime or code generation signalcargo-makegeneralized runtime or code generation signalcreate-dmggeneralized runtime or code generation signaldubgeneralized runtime or code generation signalopalgeneralized runtime or code generation signalportable-rubygeneralized runtime or code generation signalrubydoc example: interpreter runtimeabi3auditScans Python packages for abi3 violations and inconsistencies

Approval-gated tools

go7 approval-gate rules are present.node7 approval-gate rules are present.uv6 approval-gate rules are present.

Related hubs

Package ecosystem packagesPackages that install, publish, inspect, or automate other package ecosystems.269Terminal utility packagesCommand-line utilities with local package pages, executable metadata, and Automic Vault security notes.234Homebrew utility packagesHomebrew packages with local package pages that need at least one crawlable package-graph path.227Web development packagesWeb servers, frontend build tools, JavaScript packages, CSS tools, and browser-adjacent utilities.213Text processing packagesPackages used to inspect, transform, search, render, or generate text and structured documents.202Developer build packagesBuild systems, compilers, generators, and developer tools that influence local source trees and artifacts.200Language runtime packagesLanguage runtimes, package ecosystems, and interpreter-adjacent packages.180Source-control packagesSource-control packages can read or mutate repositories, issue trackers, release flows, and authenticated developer state.141

Representative package spokes

semverThe semantic version parser used by npm.pnpmFast, disk space efficient package managernoptOption parsing for Node, supporting types, shorthands, etc. Used by npm.napi-postinstallThe postinstall script helper for handling native bindings in legacy npm versionsnpma package manager for JavaScriptpacoteJavaScript package downloaderyarn📦🐈 Fast, reliable, and secure dependency management.opencollective-postinstallLightweight npm postinstall message to invite people to donate to your collectivenpm-run-allA CLI tool to run multiple npm-scripts in parallel or sequential.corepackNucleus package metadata for corepack, from local Automic Vault package sources.mqttA library for the MQTT protocolnpm-run-all2A CLI tool to run multiple npm-scripts in parallel or sequential. (Maintenance fork)fast-npm-metaGet npm package metadataallure-commandlineWrapper to install Allure-commandline via NPMonly-allowForce a specific package manager to be used on a projectprebuildifyCreate and package prebuilds for native modules

packages

Indexed package pages

PackageManagerSignalsWhy it appears here
goHomebrewapproval gate, yellow risk, v1.26.57 approval-gate rules are present.
nodeHomebrewapproval gate, yellow risk, v26.4.07 approval-gate rules are present.
uvHomebrewapproval gate, v0.11.286 approval-gate rules are present.
build2Homebrewyellow risk, v0.18.1generalized runtime or code generation signal
bunsterHomebrewyellow risk, v0.14.0generalized runtime or code generation signal
cargo-makeHomebrewyellow risk, v0.37.24generalized runtime or code generation signal
create-dmgHomebrewyellow risk, v1.3.0generalized runtime or code generation signal
dubHomebrewyellow risk, v1.41.0generalized runtime or code generation signal
opalHomebrewyellow risk, v1.8.3generalized runtime or code generation signal
portable-rubyHomebrewyellow risk, v4.0.5generalized runtime or code generation signal
rubyHomebrewyellow risk, v4.0.5doc example: interpreter runtime
abi3auditHomebrewv0.0.26no executable entrypoint in the package index
appriseHomebrewv1.12.0no executable entrypoint in the package index
auditwheelHomebrewgreen risk, v6.7.0narrow executable package without higher-risk signals
brew-gemHomebrewv1.3.4no executable entrypoint in the package index
cargo-aboutHomebrewgreen risk, v0.9.1narrow executable package without higher-risk signals
cargo-all-featuresHomebrewgreen risk, v1.12.0narrow executable package without higher-risk signals
cargo-auditHomebrewgreen risk, v0.22.2narrow executable package without higher-risk signals
cargo-auditableHomebrewgreen risk, v0.7.5narrow executable package without higher-risk signals
cargo-binstallHomebrewgreen risk, v1.20.1narrow executable package without higher-risk signals
cargo-binutilsHomebrewgreen risk, v0.4.0narrow executable package without higher-risk signals
cargo-bloatHomebrewgreen risk, v0.12.1narrow executable package without higher-risk signals
cargo-bundleHomebrewgreen risk, v0.11.0narrow executable package without higher-risk signals
cargo-cHomebrewgreen risk, v0.10.23narrow executable package without higher-risk signals
cargo-cacheHomebrewgreen risk, v0.8.3narrow executable package without higher-risk signals
cargo-carefulHomebrewgreen risk, v0.4.10narrow executable package without higher-risk signals
cargo-chefHomebrewgreen risk, v0.1.77narrow executable package without higher-risk signals
cargo-cloneHomebrewgreen risk, v1.2.4narrow executable package without higher-risk signals
cargo-componentHomebrewgreen risk, v0.21.1narrow executable package without higher-risk signals
cargo-cyclonedxHomebrewgreen risk, v0.5.9narrow executable package without higher-risk signals
cargo-denyHomebrewv0.19.9no executable entrypoint in the package index
cargo-depgraphHomebrewgreen risk, v1.6.0narrow executable package without higher-risk signals
cargo-docsetHomebrewgreen risk, v0.3.1narrow executable package without higher-risk signals
cargo-editHomebrewgreen risk, v0.13.11narrow executable package without higher-risk signals
cargo-expandHomebrewv1.0.123no executable entrypoint in the package index
cargo-features-managerHomebrewgreen risk, v0.11.1narrow executable package without higher-risk signals
cargo-flamegraphHomebrewgreen risk, v0.6.13narrow executable package without higher-risk signals
cargo-fuzzHomebrewgreen risk, v0.13.2narrow executable package without higher-risk signals
cargo-geigerHomebrewgreen risk, v0.13.0narrow executable package without higher-risk signals
cargo-generateHomebrewv0.23.12no executable entrypoint in the package index
cargo-hackHomebrewgreen risk, v0.6.45narrow executable package without higher-risk signals
cargo-instaHomebrewv1.48.0no executable entrypoint in the package index
cargo-instrumentsHomebrewv0.4.17no executable entrypoint in the package index
cargo-llvm-covHomebrewv0.8.7no executable entrypoint in the package index
cargo-llvm-linesHomebrewv0.4.46no executable entrypoint in the package index
cargo-msrvHomebrewgreen risk, v0.19.3narrow executable package without higher-risk signals
cargo-nextestHomebrewv0.9.140no executable entrypoint in the package index
cargo-outdatedHomebrewgreen risk, v0.19.0narrow executable package without higher-risk signals
cargo-public-apiHomebrewgreen risk, v0.52.0library-like package without higher-risk signals
cargo-releaseHomebrewgreen risk, v1.1.2narrow executable package without higher-risk signals
cargo-run-binHomebrewgreen risk, v1.7.4narrow executable package without higher-risk signals
cargo-shearHomebrewv1.13.1no executable entrypoint in the package index
cargo-sortHomebrewgreen risk, v2.1.4narrow executable package without higher-risk signals
cargo-spellcheckHomebrewgreen risk, v0.15.7narrow executable package without higher-risk signals
cargo-sweepHomebrewgreen risk, v0.8.0narrow executable package without higher-risk signals
cargo-udepsHomebrewgreen risk, v0.1.61narrow executable package without higher-risk signals
cargo-updateHomebrewgreen risk, v20.0.3narrow executable package without higher-risk signals
cargo-zigbuildHomebrewgreen risk, v0.23.0narrow executable package without higher-risk signals
cariddiHomebrewgreen risk, v1.4.6narrow executable package without higher-risk signals
charmcraftHomebrewv4.3.0no executable entrypoint in the package index
chrubyHomebrewgreen risk, v0.3.9narrow executable package without higher-risk signals
classifierHomebrewv2.6.0no executable entrypoint in the package index
conda-lockHomebrewv4.0.2no executable entrypoint in the package index
cpanminusHomebrewgreen risk, v1.7049narrow executable package without higher-risk signals
cpplintHomebrewgreen risk, v2.0.2narrow executable package without higher-risk signals
cucumber-rubyHomebrewgreen risk, v11.1.1narrow executable package without higher-risk signals
docker-lsHomebrewgreen risk, v0.5.1narrow executable package without higher-risk signals
dpkgHomebrewgreen risk, v1.23.7narrow executable package without higher-risk signals
dumHomebrewgreen risk, v0.1.20narrow executable package without higher-risk signals
fakerootHomebrewv1.38.1no executable entrypoint in the package index
flitHomebrewv3.12.0no executable entrypoint in the package index
ghiHomebrewgreen risk, v1.2.1narrow executable package without higher-risk signals