# Source-control packages

Source-control packages can read or mutate repositories, issue trackers, release flows, and authenticated developer state.

- **Packages:** 3,476
- **Protected tools:** 0
- **Approval gates:** 7
- **Non-low risk:** 883
- **Updated:** 2026-07-08

## Why this package group is here

Source-control packages currently includes 3476 package catalog entries. 0 have protected-tool coverage, 7 have approval-gate metadata, and 883 have non-low Geiger classifier findings. The grouping comes from package metadata, so it can stay current as that metadata changes.

## Generated source

This hub uses the same local package data as individual package pages: Nucleus package metadata, Homebrew enrichment, Geiger classifier output, secret-handling manifests, and approval-gate seeds where available.

## Review model

Use the hub to find command families that need tighter secret injection, approval gates, or manual review before agents run them.

## Indexed package pages

- [jq](https://www.automicvault.com/pkg/brew/jq/) - 3 approval-gate rules are present.
- [mkcert](https://www.automicvault.com/pkg/brew/mkcert/) - 4 approval-gate rules are present.
- [pkgconf](https://www.automicvault.com/pkg/brew/pkgconf/) - 3 approval-gate rules are present.
- [xcbeautify](https://www.automicvault.com/pkg/brew/xcbeautify/) - 2 approval-gate rules are present.
- [gh](https://www.automicvault.com/pkg/brew/gh/) - 7 approval-gate rules are present.
- [git](https://www.automicvault.com/pkg/brew/git/) - 6 approval-gate rules are present.
- [pyenv](https://www.automicvault.com/pkg/brew/pyenv/) - 5 approval-gate rules are present.
- [autojump](https://www.automicvault.com/pkg/brew/autojump/) - generalized runtime or code generation signal
- [aws-shell](https://www.automicvault.com/pkg/brew/aws-shell/) - generalized runtime or code generation signal
- [bam](https://www.automicvault.com/pkg/brew/bam/) - generalized runtime or code generation signal
- [beakerlib](https://www.automicvault.com/pkg/brew/beakerlib/) - generalized runtime or code generation signal
- [bic](https://www.automicvault.com/pkg/brew/bic/) - generalized runtime or code generation signal
- [boot-clj](https://www.automicvault.com/pkg/brew/boot-clj/) - generalized runtime or code generation signal
- [brainfuck](https://www.automicvault.com/pkg/brew/brainfuck/) - generalized runtime or code generation signal
- [cargo-make](https://www.automicvault.com/pkg/brew/cargo-make/) - generalized runtime or code generation signal
- [cbmbasic](https://www.automicvault.com/pkg/brew/cbmbasic/) - generalized runtime or code generation signal
- [compiledb](https://www.automicvault.com/pkg/brew/compiledb/) - broad file, network, media, or database tool signal
- [conduit](https://www.automicvault.com/pkg/brew/conduit/) - broad file, network, media, or database tool signal
- [cpi](https://www.automicvault.com/pkg/brew/cpi/) - generalized runtime or code generation signal
- [cpu_features](https://www.automicvault.com/pkg/brew/cpu-features/) - generalized runtime or code generation signal
- [create-dmg](https://www.automicvault.com/pkg/brew/create-dmg/) - generalized runtime or code generation signal
- [crun](https://www.automicvault.com/pkg/brew/crun/) - generalized runtime or code generation signal
- [crystal-icr](https://www.automicvault.com/pkg/brew/crystal-icr/) - generalized runtime or code generation signal
- [crytic-compile](https://www.automicvault.com/pkg/brew/crytic-compile/) - generalized runtime or code generation signal
- [ctl](https://www.automicvault.com/pkg/brew/ctl/) - generalized runtime or code generation signal
- [dafny](https://www.automicvault.com/pkg/brew/dafny/) - generalized runtime or code generation signal
- [dcd](https://www.automicvault.com/pkg/brew/dcd/) - broad file, network, media, or database tool signal
- [desk](https://www.automicvault.com/pkg/brew/desk/) - generalized runtime or code generation signal
- [docker-agent](https://www.automicvault.com/pkg/brew/docker-agent/) - generalized runtime or code generation signal
- [envv](https://www.automicvault.com/pkg/brew/envv/) - generalized runtime or code generation signal
- [erlang-language-platform](https://www.automicvault.com/pkg/brew/erlang-language-platform/) - broad file, network, media, or database tool signal
- [eva](https://www.automicvault.com/pkg/brew/eva/) - generalized runtime or code generation signal
- [fastmod](https://www.automicvault.com/pkg/brew/fastmod/) - generalized runtime or code generation signal
- [fobis](https://www.automicvault.com/pkg/brew/fobis/) - generalized runtime or code generation signal
- [frege](https://www.automicvault.com/pkg/brew/frege/) - generalized runtime or code generation signal
- [frege-repl](https://www.automicvault.com/pkg/brew/frege-repl/) - generalized runtime or code generation signal
- [fstrm](https://www.automicvault.com/pkg/brew/fstrm/) - broad file, network, media, or database tool signal
- [fswatch](https://www.automicvault.com/pkg/brew/fswatch/) - generalized runtime or code generation signal
- [gdrive-downloader](https://www.automicvault.com/pkg/brew/gdrive-downloader/) - broad file, network, media, or database tool signal
- [gimme](https://www.automicvault.com/pkg/brew/gimme/) - generalized runtime or code generation signal
- [git-if](https://www.automicvault.com/pkg/brew/git-if/) - generalized runtime or code generation signal
- [gitlab-ci-local](https://www.automicvault.com/pkg/brew/gitlab-ci-local/) - generalized runtime or code generation signal
- [gitlogue](https://www.automicvault.com/pkg/brew/gitlogue/) - generalized runtime or code generation signal
- [gum](https://www.automicvault.com/pkg/brew/gum/) - generalized runtime or code generation signal
- [harbour](https://www.automicvault.com/pkg/brew/harbour/) - generalized runtime or code generation signal
- [hdt](https://www.automicvault.com/pkg/brew/hdt/) - broad file, network, media, or database tool signal
- [hey](https://www.automicvault.com/pkg/brew/hey/) - broad file, network, media, or database tool signal
- [historian](https://www.automicvault.com/pkg/brew/historian/) - broad file, network, media, or database tool signal
- [intelli-shell](https://www.automicvault.com/pkg/brew/intelli-shell/) - generalized runtime or code generation signal
- [jo](https://www.automicvault.com/pkg/brew/jo/) - generalized runtime or code generation signal
- [jshon](https://www.automicvault.com/pkg/brew/jshon/) - generalized runtime or code generation signal
- [kcov](https://www.automicvault.com/pkg/brew/kcov/) - generalized runtime or code generation signal
- [ki](https://www.automicvault.com/pkg/brew/ki/) - generalized runtime or code generation signal
- [kona](https://www.automicvault.com/pkg/brew/kona/) - generalized runtime or code generation signal
- [ksh93](https://www.automicvault.com/pkg/brew/ksh93/) - generalized runtime or code generation signal
- [libnfc](https://www.automicvault.com/pkg/brew/libnfc/) - generalized runtime or code generation signal
- [litani](https://www.automicvault.com/pkg/brew/litani/) - generalized runtime or code generation signal
- [luajit-openresty](https://www.automicvault.com/pkg/brew/luajit-openresty/) - generalized runtime or code generation signal
- [luaver](https://www.automicvault.com/pkg/brew/luaver/) - generalized runtime or code generation signal
- [lune](https://www.automicvault.com/pkg/brew/lune/) - generalized runtime or code generation signal
- [maven-shell](https://www.automicvault.com/pkg/brew/maven-shell/) - generalized runtime or code generation signal
- [mcfly](https://www.automicvault.com/pkg/brew/mcfly/) - generalized runtime or code generation signal
- [mdsh](https://www.automicvault.com/pkg/brew/mdsh/) - generalized runtime or code generation signal
- [mk-configure](https://www.automicvault.com/pkg/brew/mk-configure/) - generalized runtime or code generation signal
- [mlkit](https://www.automicvault.com/pkg/brew/mlkit/) - generalized runtime or code generation signal
- [moco](https://www.automicvault.com/pkg/brew/moco/) - broad file, network, media, or database tool signal
- [mplayershell](https://www.automicvault.com/pkg/brew/mplayershell/) - generalized runtime or code generation signal
- [nesc](https://www.automicvault.com/pkg/brew/nesc/) - broad file, network, media, or database tool signal
- [nfdump](https://www.automicvault.com/pkg/brew/nfdump/) - generalized runtime or code generation signal
- [nsh](https://www.automicvault.com/pkg/brew/nsh/) - generalized runtime or code generation signal
- [nuls](https://www.automicvault.com/pkg/brew/nuls/) - generalized runtime or code generation signal
- [nushell](https://www.automicvault.com/pkg/brew/nushell/) - generalized runtime or code generation signal