mlab packages

Linux package repositories for mlab tools: apt (Debian, Ubuntu) and dnf / zypper (Fedora, RHEL, Rocky, Alma, openSUSE). Architectures: amd64 / x86_64, arm64 / aarch64.

apt (Debian, Ubuntu): add the repository once per machine, signing key + apt source
sudo install -m 0755 -d /etc/apt/keyrings
sudo curl -fsSL https://apt.mlab.sh/mlab.asc -o /etc/apt/keyrings/mlab.asc
sudo tee /etc/apt/sources.list.d/mlab.sources >/dev/null <<'EOF'
Types: deb
URIs: https://apt.mlab.sh
Suites: stable
Components: main
Signed-By: /etc/apt/keyrings/mlab.asc
EOF
sudo apt-get update

Then sudo apt-get install <name>.

dnf / zypper (Fedora, RHEL, Rocky, Alma, openSUSE): add the repository once per machine
sudo curl -fsSL https://pkg.mlab.sh/rpm/mlab.repo -o /etc/yum.repos.d/mlab.repo
# openSUSE:
sudo zypper addrepo https://pkg.mlab.sh/rpm/mlab.repo

Then sudo dnf install <name> (or sudo zypper install <name>); accept the key when its fingerprint matches the one below.

Signing key (both repositories): mlab.asc, fingerprint 717894BCC0E057E4F9BBF3CAC0E287DD9609A065. Indexes: apt InRelease, rpm repomd.xml.

Packages


inkdex

inkdex command line

inkdex indexes a codebase as a whole (symbols, calls, routes, dependencies, data flows) and lets you explore it. Needs an inkdex license from mlab.sh: https://inkdex.mlab.sh

Homepage: https://mlab.sh/code

Maintainer: mlab <[email protected]>. Latest: 0.4.1.

sudo apt-get install inkdex
sudo apt-get install inkdex=0.4.1   # pin a version
sudo dnf install inkdex
sudo dnf install inkdex-0.4.1   # pin a version

apt (.deb): 2 version(s), last 2 shown

VersionArchFileSizeDependsSHA256
0.4.1amd64inkdex_0.4.1_amd64.deb7.3 MBlibc6 (>= 2.34)fd7f81820b36439aea693864efe8f55e1827a50f5648295e2b6dcfa763100bf6
0.4.0amd64inkdex_0.4.0_amd64.deb7.3 MBlibc6 (>= 2.34)35f372900cae6bc04445f5a2f14088a293798bfd328b1aba8266a96d1af6e7c2

dnf / zypper (.rpm): 2 version(s), last 2 shown

VersionArchFileSizeDependsSHA256
0.4.1x86_64inkdex-0.4.1-1.x86_64.rpm7.8 MB/bin/sh, glibc >= 2.367577fc1063e57202079e5bfb9363b01a25c67c337c80c0f3c4bc474930ef2be8
0.4.0x86_64inkdex-0.4.0-1.x86_64.rpm7.8 MB/bin/sh, glibc >= 2.361d36be55f04e7e7fdfbe2c524cc845e73b8235af5b9a93fb3f0655d4b8e4ac06

inkdex-vuln

Vulnerabilities found in a repository's inkdex: injections from its flows,

secrets, weak crypto, dangerous APIs, vulnerable dependencies inkdex-vuln is inkdex plus `scan`: the vulnerabilities of a repository, with their CWE, a severity and a verdict, as text, JSON or SARIF. Needs an inkdex license from mlab.sh: https://inkdex.mlab.sh

Homepage: https://mlab.sh/code

Maintainer: mlab <[email protected]>. Latest: 0.9.0.

sudo apt-get install inkdex-vuln
sudo apt-get install inkdex-vuln=0.9.0   # pin a version
sudo dnf install inkdex-vuln
sudo dnf install inkdex-vuln-0.9.0   # pin a version

apt (.deb): 2 version(s), last 2 shown

VersionArchFileSizeDependsSHA256
0.9.0amd64inkdex-vuln_0.9.0_amd64.deb7.5 MBlibc6 (>= 2.34)f179529604f04c2414d8f4f4650a381d70aedb4f9149775b4d61bd2813e2112b
0.4.0amd64inkdex-vuln_0.4.0_amd64.deb7.4 MBlibc6 (>= 2.34)7de6d1d5ff165daa1744bdd8b79c5c74febbb6e74908c22c2036e979ff765133

dnf / zypper (.rpm): 2 version(s), last 2 shown

VersionArchFileSizeDependsSHA256
0.9.0x86_64inkdex-vuln-0.9.0-1.x86_64.rpm8.0 MB/bin/sh, glibc >= 2.36a64cede8bdd4c6aba7a8c5ebd4a502742ca30a5fa757ce5b8cd5b294ee0a00ba
0.4.0x86_64inkdex-vuln-0.4.0-1.x86_64.rpm8.0 MB/bin/sh, glibc >= 2.365a76b428a2b0f12d4363525ce7d67a0e17e41d9d28c5112920639806ca020e89

postmortem

Supply-chain scanner. Flags malicious install code, typosquats, and shady

provenance across your dependencies and your OS packages. postmortem resolves your dependency graph offline, then optionally enriches it with repository reputation, maintainer provenance and known-CVE intelligence. It also audits the OS package managers installed on the machine.

Homepage: https://github.com/mlab-sh/postmortem

Maintainer: mlab <[email protected]>. Latest: 2.9.2.

sudo apt-get install postmortem
sudo apt-get install postmortem=2.9.2   # pin a version
sudo dnf install postmortem
sudo dnf install postmortem-2.9.2   # pin a version

apt (.deb): 11 version(s), last 10 shown

VersionArchFileSizeDependsSHA256
2.9.2amd64postmortem_2.9.2_amd64.deb4.0 MBlibc6 (>= 2.34)95722850437c167fedd23c0049c0de964e9653f6fcd8c7cb56473c50defad989
2.9.2arm64postmortem_2.9.2_arm64.deb3.4 MBlibc6:arm64 (>= 2.35)b9da1cacfd46260735fa3f6c03754903a042b7935628f50a0a578f7231240ffd
2.9.1amd64postmortem_2.9.1_amd64.deb4.0 MBlibc6 (>= 2.34)2b12ce9ca49659050e641ed839d69d6c99fc1f7dea0b8fe722c887c08ce5c4e3
2.9.1arm64postmortem_2.9.1_arm64.deb3.4 MBlibc6:arm64 (>= 2.35)ecbfe4b6125e80b575f4b60941a96d4b0460b4f781a77a5ed482f3b977d2fc3f
2.9.0amd64postmortem_2.9.0_amd64.deb4.0 MBlibc6 (>= 2.34)b989864419d8bb0dd3b2a66bc2b952a80744648df9c713523c632419c54f686d
2.9.0arm64postmortem_2.9.0_arm64.deb3.4 MBlibc6:arm64 (>= 2.35)360e183949e280cc1e08eb7b980a3b288466ae4e52ed7c545d7c90f96b695bcb
2.8.0amd64postmortem_2.8.0_amd64.deb3.7 MBlibc6 (>= 2.34)7abc34b44e58deff06d1b5000ea98eab89daed1d901029ba6b1b98daf6ad10f0
2.8.0arm64postmortem_2.8.0_arm64.deb3.2 MBlibc6:arm64 (>= 2.35)375d8ac36e898dd36057b80b45c80706529ab9eeacf7f87f53901f10f6c71368
2.7.2amd64postmortem_2.7.2_amd64.deb3.5 MBlibc6 (>= 2.34)9727c7c27894ac1138e0395248192afce152b33199f75ecfafe1431eaa227f4f
2.7.2arm64postmortem_2.7.2_arm64.deb3.0 MBlibc6:arm64 (>= 2.35)1eb32d2aa219ff92827ecc8e15d041429954c6614c2fb9698fa380a44a4455ae
2.7.1amd64postmortem_2.7.1_amd64.deb3.4 MBlibc6 (>= 2.34)27f9fddbbbee3270f3e6f67f88e7bc98ca16437d49b6162f54b0cd4223098bee
2.7.1arm64postmortem_2.7.1_arm64.deb3.0 MBlibc6:arm64 (>= 2.35)cf228038a9dd47917955f5923ef500d96efef831c092ba786a6285d2f0db0bc5
2.7.0amd64postmortem_2.7.0_amd64.deb3.4 MBlibc6 (>= 2.34)6aba4c915a6f32bd52cd54d19796614fcee5a60f26fe340943aa5b739959c022
2.7.0arm64postmortem_2.7.0_arm64.deb3.0 MBlibc6:arm64 (>= 2.35)d4f540ddb32301614dad0ec1197e89de18a841858b3dbb99d8e712475b75a11d
2.6.0amd64postmortem_2.6.0_amd64.deb3.2 MBlibc6 (>= 2.34)6f68f42034cffdac05c6f369a19368eb210dcc128afa17dcbb951a5ee623d5d2
2.6.0arm64postmortem_2.6.0_arm64.deb2.8 MBlibc6:arm64 (>= 2.35)e85e33e95f4692e4c82a01fc9e0af7cb284e18c60679a3297e65d6f84ae884ac
2.5.0amd64postmortem_2.5.0_amd64.deb3.1 MBlibc6 (>= 2.34)b148c022028d72ea335d40470c3554b308e951c7b581268f95aa2b304af3a643
2.5.0arm64postmortem_2.5.0_arm64.deb2.7 MBlibc6:arm64 (>= 2.35)c01c60a4b67d4b1f404263b91aba0564a2df3c70aef7ec3f2336792c075519d9
2.4.0amd64postmortem_2.4.0_amd64.deb3.1 MBlibc6 (>= 2.34)ce56ceedb7e3994804734707bdcbb7462f02752552dc694ad75d46c1e03c1029
2.4.0arm64postmortem_2.4.0_arm64.deb2.7 MBlibc6:arm64 (>= 2.35)3423ab8f32d9695bcc226ea30df943b55b8298c777abd38b4f0381799dad2a4f

dnf / zypper (.rpm): 1 version(s), last 1 shown

VersionArchFileSizeDependsSHA256
2.9.2aarch64postmortem-2.9.2-1.aarch64.rpm4.0 MB/bin/sh, glibc >= 2.342279de74b1f107dd4778b30d636916f64c00b7f048c427fb4b5e4f150d6cde5a
2.9.2x86_64postmortem-2.9.2-1.x86_64.rpm4.2 MB/bin/sh, glibc >= 2.34188d8a2d1c17cf5754e4b799feb5584047682a4b85f1b38d8b870a4b58cc99c1

Generated 2026-10-22 17:44 UTC from mlab-sh/apt.