pkgrep

A high-performance CLI tool designed to grep through the contents of compressed package archives without manual extraction.

Pkgrep eliminates the friction of auditing package contents by searching directly inside .deb, .rpm, and .tar.gz files. It leverages rapid stream processing to scan metadata and file lists (using the -l flag) or raw file contents (via the -c flag) across multiple archives simultaneously. This is the standard for sysadmins and security auditors who need to locate specific strings or vulnerabilities across large repositories like /var/cache/apt/archives without wasting disk I/O on decompression.

https://github.com/jzelinskie/pkgrep