broxit

3 ms·

1. 1.▲
   by broxit 4mo ago

   > Even in that case, my suggestion would be that we just run it in our own CI and block package release. I agree. > open source security scanner that runs on all Homebrew packages and requires a cooldown. I think that is where all thi
2. 2.▲
   by broxit 4mo ago

   Glad to see that Homebrew is taking security seriously. Still, I want to minimize the number of parties who can quickly get new code onto my machine. Your doc says "Human review of each release." What does that actually entail? uv
3. 3.▲
   by broxit 4mo ago

   Thanks for the update. Is there any chance we can get some kind of cooldown mechanism in Homebrew? The only people I want to trust to quickly ship new code to my machine are Apple and my browser (which handles more untrusted input than anyt