Homebrew Package Manager Gets Major Update with Built-in GUI and Enhanced Security Features
A new version of Homebrew, a popular open-source package manager for macOS, has been released with a host of exciting features that promise to make managing software on your Mac easier and more secure. The latest update, version 7.0.0, brings a built-in vulnerability scanner, stronger security controls, and the full release of its native BrewUI graphical interface.
For those who may be unfamiliar, Homebrew is a package manager that allows users to install software on their macOS systems in a similar way to Linux package managers. It does this by automatically downloading packages and resolving and installing their dependencies. With over 49,000 stars and 11,000 forks on GitHub, it’s clear that the project has gained significant traction among Mac users, and as such, threat actors have taken notice. In fact, Homebrew has been targeted by malware authors in the past through various means, including clone sites and ClickFix lures.
One of the standout features of the new version is its built-in vulnerability scanner, which can be accessed through a new command called `brew vulns`. This tool allows users to scan their installed formulae (the Ruby-based package definitions used by Homebrew) for vulnerabilities. The scanner works by sending the upstream repository and version/tag of each formula to OSV.dev in a batch query, retrieving vulnerability records, verifying potential matches, applying optional severity filters, and finally checking whether Homebrew has already applied a security patch.
In addition to the vulnerability scanner, the new version also includes a Homebrew-specific advisory database that tracks vulnerabilities affecting the formula versions and revisions distributed by Homebrew. This database publishes OSV-format records documenting vulnerabilities affecting Homebrew formula versions and revisions, including fixes that have been backported without changing the upstream software version. The project team notes that these records are freely reusable under CC0, giving security teams a shared source of Homebrew-specific vulnerability data.
The update also includes several other features aimed at improving security and user experience. For example, access to users’ home directories is blocked by default, network-enabled dependency downloads are separated from offline installation, and installations and upgrades are faster due to the ability to download, prepare, and install packages concurrently.
Overall, the latest update to Homebrew promises to make managing software on your Mac easier, more secure, and more efficient. If you’re a Mac user who relies on Homebrew for installing and managing software, it’s worth taking some time to explore the new features and benefits of version 7.0.0.
In practical terms, users should take advantage of the built-in vulnerability scanner to identify and address any potential security issues with their installed formulae. Additionally, users should familiarize themselves with the new advisory database and its freely reusable records to better understand vulnerabilities affecting Homebrew formula versions and revisions. By doing so, Mac users can enjoy a more secure and streamlined experience when managing software on their systems.
Source: Bleeping Computer — 2026-09-14