> I think that telling users to execute a shell command to install software is not the smartest idea in any case (eg. no way to verify signatures of installed s

> I think that telling users to execute a shell command to install software is not the smartest idea in any case (eg. no way to verify signatures of installed software) Installing via a shell command has nothing to do with the (in)ability to verify signatures. You aren’t more protected running a random installer package than an auditable shell script from the official Homebrew repo. Also, Homebrew supports more installation methods including cloning the git repo by yourself or un-taring an archive.