Generated source
This hub uses the same local package data as individual package pages: Nucleus package metadata, Homebrew enrichment, Geiger classifier output, secret-handling manifests, and approval-gate seeds where available.
security
Source-control packages can read or mutate repositories, issue trackers, release flows, and authenticated developer state.
summary
Source-control packages currently includes 3476 package catalog entries. 0 have protected-tool coverage, 7 have approval-gate metadata, and 883 have non-low Geiger classifier findings. The grouping comes from package metadata, so it can stay current as that metadata changes.
This hub uses the same local package data as individual package pages: Nucleus package metadata, Homebrew enrichment, Geiger classifier output, secret-handling manifests, and approval-gate seeds where available.
Use the hub to find command families that need tighter secret injection, approval gates, or manual review before agents run them.
packages
| Package | Manager | Signals | Why it appears here |
|---|---|---|---|
| jq | Homebrew | approval gate, green risk, v1.8.2 | 3 approval-gate rules are present. |
| mkcert | Homebrew | approval gate, green risk, v1.4.4 | 4 approval-gate rules are present. |
| pkgconf | Homebrew | approval gate, green risk, v2.5.1 | 3 approval-gate rules are present. |
| xcbeautify | Homebrew | approval gate, green risk, v3.2.1 | 2 approval-gate rules are present. |
| gh | Homebrew | approval gate, blue risk, v2.96.0 | 7 approval-gate rules are present. |
| git | Homebrew | approval gate, blue risk, v2.55.0 | 6 approval-gate rules are present. |
| pyenv | Homebrew | approval gate, orange risk, v2.7.3 | 5 approval-gate rules are present. |
| autojump | Homebrew | yellow risk, v22.5.3 | generalized runtime or code generation signal |
| aws-shell | Homebrew | yellow risk, v0.2.2 | generalized runtime or code generation signal |
| bam | Homebrew | yellow risk, v0.5.1 | generalized runtime or code generation signal |
| beakerlib | Homebrew | yellow risk, v1.33.3 | generalized runtime or code generation signal |
| bic | Homebrew | yellow risk, v1.0.0 | generalized runtime or code generation signal |
| boot-clj | Homebrew | yellow risk, v2.8.3 | generalized runtime or code generation signal |
| brainfuck | Homebrew | yellow risk, v2.7.3 | generalized runtime or code generation signal |
| cargo-make | Homebrew | yellow risk, v0.37.24 | generalized runtime or code generation signal |
| cbmbasic | Homebrew | yellow risk, v1.0 | generalized runtime or code generation signal |
| compiledb | Homebrew | yellow risk, v0.10.7 | broad file, network, media, or database tool signal |
| conduit | Homebrew | yellow risk, v0.16.1 | broad file, network, media, or database tool signal |
| cpi | Homebrew | yellow risk, v2.2.4 | generalized runtime or code generation signal |
| cpu_features | Homebrew | yellow risk, v0.11.0 | generalized runtime or code generation signal |
| create-dmg | Homebrew | yellow risk, v1.3.0 | generalized runtime or code generation signal |
| crun | Homebrew | yellow risk, v1.28 | generalized runtime or code generation signal |
| crystal-icr | Homebrew | yellow risk, v0.9.0 | generalized runtime or code generation signal |
| crytic-compile | Homebrew | yellow risk, v0.4.1 | generalized runtime or code generation signal |
| ctl | Homebrew | yellow risk, v1.5.5 | generalized runtime or code generation signal |
| dafny | Homebrew | yellow risk, v4.11.0 | generalized runtime or code generation signal |
| dcd | Homebrew | yellow risk, v0.16.2 | broad file, network, media, or database tool signal |
| desk | Homebrew | yellow risk, v0.6.0 | generalized runtime or code generation signal |
| docker-agent | Homebrew | yellow risk, v1.101.0 | generalized runtime or code generation signal |
| envv | Homebrew | yellow risk, v1.7 | generalized runtime or code generation signal |
| erlang-language-platform | Homebrew | yellow risk, v2026-02-27 | broad file, network, media, or database tool signal |
| eva | Homebrew | yellow risk, v0.3.1 | generalized runtime or code generation signal |
| fastmod | Homebrew | yellow risk, v0.4.4 | generalized runtime or code generation signal |
| fobis | Homebrew | yellow risk, v3.8.20 | generalized runtime or code generation signal |
| frege | Homebrew | yellow risk, v3.24.405 | generalized runtime or code generation signal |
| frege-repl | Homebrew | yellow risk, v1.4-SNAPSHOT | generalized runtime or code generation signal |
| fstrm | Homebrew | yellow risk, v0.6.1 | broad file, network, media, or database tool signal |
| fswatch | Homebrew | yellow risk, v1.21.0 | generalized runtime or code generation signal |
| gdrive-downloader | Homebrew | yellow risk, v2.0 | broad file, network, media, or database tool signal |
| gimme | Homebrew | yellow risk, v1.5.6 | generalized runtime or code generation signal |
| git-if | Homebrew | yellow risk, v1.3.8 | generalized runtime or code generation signal |
| gitlab-ci-local | Homebrew | yellow risk, v4.73.0 | generalized runtime or code generation signal |
| gitlogue | Homebrew | yellow risk, v0.9.0 | generalized runtime or code generation signal |
| gum | Homebrew | yellow risk, v0.17.0 | generalized runtime or code generation signal |
| harbour | Homebrew | yellow risk, v3.0.0 | generalized runtime or code generation signal |
| hdt | Homebrew | yellow risk, v1.3.3 | broad file, network, media, or database tool signal |
| hey | Homebrew | yellow risk, v0.1.5 | broad file, network, media, or database tool signal |
| historian | Homebrew | yellow risk, v0.0.2 | broad file, network, media, or database tool signal |
| intelli-shell | Homebrew | yellow risk, v3.4.5 | generalized runtime or code generation signal |
| jo | Homebrew | yellow risk, v1.9 | generalized runtime or code generation signal |
| jshon | Homebrew | yellow risk, v20131105 | generalized runtime or code generation signal |
| kcov | Homebrew | yellow risk, v43 | generalized runtime or code generation signal |
| ki | Homebrew | yellow risk, v0.5.2 | generalized runtime or code generation signal |
| kona | Homebrew | yellow risk, v20211225 | generalized runtime or code generation signal |
| ksh93 | Homebrew | yellow risk, v1.0.10 | generalized runtime or code generation signal |
| libnfc | Homebrew | yellow risk, v1.8.0 | generalized runtime or code generation signal |
| litani | Homebrew | yellow risk, v1.29.0 | generalized runtime or code generation signal |
| luajit-openresty | Homebrew | yellow risk, v2.1-20260701 | generalized runtime or code generation signal |
| luaver | Homebrew | yellow risk, v1.1.0 | generalized runtime or code generation signal |
| lune | Homebrew | yellow risk, v0.10.5 | generalized runtime or code generation signal |
| maven-shell | Homebrew | yellow risk, v1.1.0 | generalized runtime or code generation signal |
| mcfly | Homebrew | yellow risk, v0.9.4 | generalized runtime or code generation signal |
| mdsh | Homebrew | yellow risk, v0.9.2 | generalized runtime or code generation signal |
| mk-configure | Homebrew | yellow risk, v0.40.0 | generalized runtime or code generation signal |
| mlkit | Homebrew | yellow risk, v4.7.14 | generalized runtime or code generation signal |
| moco | Homebrew | yellow risk, v1.6.1 | broad file, network, media, or database tool signal |
| mplayershell | Homebrew | yellow risk, v0.9.3 | generalized runtime or code generation signal |
| nesc | Homebrew | yellow risk, v1.4.0 | broad file, network, media, or database tool signal |
| nfdump | Homebrew | yellow risk, v1.7.8 | generalized runtime or code generation signal |
| nsh | Homebrew | yellow risk, v0.4.2 | generalized runtime or code generation signal |
| nuls | Homebrew | yellow risk, v0.2.0 | generalized runtime or code generation signal |
| nushell | Homebrew | yellow risk, v0.114.0 | generalized runtime or code generation signal |