SIsimonw·Sep 13, 2026
TIL Homebrew has its own sandbox mechanism - looks like it's built around their own sandbox-exec wrapper, at least on macOS: https://github.com/Homebrew/brew/blob/d79ef822ab8136e393ed5f...
In Homebrew 7.0.0Homebrew
brew
Ruby2016â2026
Homebrew / brew
brew
đș The Package Manager for Everywhere
158Distinct people
201Mentions
0Explicit recommenders
50.3KGitHub stars
What to know before exploring
What it is
đș The Package Manager for Everywhere
GitHub
Where it is used
No documented product use was verified in the last source check.
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
- homebrew/homebrew-core · linked in 5 of the same discussions
- homebrew/discussions · linked in 2 of the same discussions
Mentioned in the same Hacker News threads. That is not proof they are substitutes.
This week on Hacker News
Nov 7âNov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 3:56:07 PM UTC.
No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.
Mentions over time
HN mentions by year201 dated mentions
Observed mentions: 2016-04-04 18:36:42 UTC to 2026-09-13 13:02:51 UTC.
* An incomplete calendar period is marked with an outlined bar. Its count is not directly comparable with a full period.
Counts come from the repositoryâs dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| 2016 | 2016-01-01 00:00:00 UTC | 2017-01-01 00:00:00 UTC | 47 | 7 | 40 |
| 2017 | 2017-01-01 00:00:00 UTC | 2018-01-01 00:00:00 UTC | 16 | 0 | 16 |
| 2018 | 2018-01-01 00:00:00 UTC | 2019-01-01 00:00:00 UTC | 8 | 0 | 8 |
| 2019 | 2019-01-01 00:00:00 UTC | 2020-01-01 00:00:00 UTC | 13 | 0 | 13 |
| 2020 | 2020-01-01 00:00:00 UTC | 2021-01-01 00:00:00 UTC | 29 | 6 | 23 |
| 2021 | 2021-01-01 00:00:00 UTC | 2022-01-01 00:00:00 UTC | 36 | 3 | 33 |
| 2022 | 2022-01-01 00:00:00 UTC | 2023-01-01 00:00:00 UTC | 9 | 1 | 8 |
| 2023 | 2023-01-01 00:00:00 UTC | 2024-01-01 00:00:00 UTC | 15 | 3 | 12 |
| 2024 | 2024-01-01 00:00:00 UTC | 2025-01-01 00:00:00 UTC | 9 | 1 | 8 |
| 2025 | 2025-01-01 00:00:00 UTC | 2026-01-01 00:00:00 UTC | 10 | 1 | 9 |
| 2026 (partial) | 2026-01-01 00:00:00 UTC | 2027-01-01 00:00:00 UTC | 9 | 0 | 9 |
What Hacker News says
201 sourcesThey experimented with it but ultimately decided to focus on perf with their existing ruby codebase.
https://github.com/Homebrew/brew/issues/7755#issuecomment-51...
In Homebrew 7.0.0What I find remarkable is that for at least a decade, i.e., long before LLM scrapers were a thing, GitHub engineers have been reaching out to popular package manager projects, asking them to do away with shallow clones [0] [1]. They basically used the same reasoning as your comment did.
[0]: https://github.com/Homebrew/brew/pull/9383
[1]: https://github.com/CocoaPods/CocoaPods/issues/4989#issuecomm...
In Creepy Crawliesmise has an option as well (note the caveats though):
https://mise.jdx.dev/configuration/settings.html#install_bef...
And homebrew has discussed it, kinda sorta:
https://github.com/Homebrew/brew/issues/21129
In Axios compromised on NPM â Malicious versions drop remote access trojan> Most of us want to wait a little while for the bugs to be worked out of fresh releases.
This is not something that's solved by updating less frequently though. It would be solved by a 'minimum age' setting, but `brew` aren't planning on implementing that, with arguably valid reasoning: https://github.com/Homebrew/brew/issues/21421
In Nanobrew: The fastest macOS package manager compatible with brewI recall that this became a big problem for the Homebrew project in terms of load on the repo, to the extent that Github asked them not to recommend/default-enable shallow clones for their users: https://github.com/Homebrew/brew/issues/15497#issuecomment-1...
This is likely to be lower traffic, and the history should (?) scale only linearly with new data, so likely not the worst thing. But it's something to be cognizant of when using SCM software in unexpected ways!
In Show HN: Hacker News archive (47M+ items, 11.6GB) as Parquet, updated every 5mThey said they donât want that [1]. Itâs not just me, several people have asked for it. Maintaining an extra fork just for that is also out of the question for most people.
[1] https://github.com/Homebrew/brew/issues/14217
In More Mac malware from Google searchI would agree if it was the only way to install Homebrew, but it is not.
You can install it via a .pkg here: [0]
[0] https://github.com/Homebrew/brew/releases/tag/5.0.13
In More Mac malware from Google searchThat is not 100% correct. Apple is slowing closing in the walls on a general purpose computer and preventing the bypassing of Gatekeeper with the execution of unsigned applications to _protect the children._ [0] [1] [2] [3]
[0] https://support.apple.com/guide/security/rosetta-2-on-a-mac-...
[1] https://discussions.apple.com/thread/256079635?sortBy=rank
[2] https://github.com/Homebrew/brew/issues/20755
[3] https://news.ycombinator.com/item?id=45907259
In Steam MachineHomebrew no longer allows bypassing Gatekeeper for unsigned/unnotarized software
345 points · Open discussionIt's been five years for my data point, but every single time it came time to update brew, I hit something else I'd never seen before. Every time, it broke.
And from what I can see, migrations are still causing issues. [0]
[0] https://github.com/Homebrew/brew/issues/19951
In I Used Arch, BTW: macOS, Day 1Would homebrew itself be problematic here? Does it do recursive cloning?
At least a cursory glance at the repo suggests it might:
https://github.com/Homebrew/brew/blob/700d67a85e0129ab8a893f...
In Breaking Git with a carriage return and cloning RCEIt's mostly what I use daily or a lot (except one these are not recurring; I will try to make these recurring once I am financially there again):
- https://objective-see.org/support.html (For https://github.com/objective-see/LuLu et al)
- https://www.thunderbird.net/donate (I hope none of it goes to Mozilla or Firefox. I also hope https://thundermail.com brings something than I can instead pay for, if I can or will decide to afford, instead of intermittent donations)
- https://www.borgbackup.org/support/fund.html (I would want to support https://restic.net as well as I use it so much but they never setup a way - it has been discussed :/)
- https://syncthing.net/donations
- https://github.com/Homebrew/brew#donations
- https://cryptomator.org/donate/
- https://www.patreon.com/db4s
- https://github.com/sponsors/qarmin for https://github.com/
Read the rest
qarmin/czkawka
- https://github.com/sponsors/garethgeorge for https://github.com/garethgeorge/backrest
- https://keepass.info/donate.html and https://keepassium.com/donate (Mostly the latter) (I had actually moved to StrongBox which did a U-turn on FOSS and then sold to another company. At that point I came back to KeePassium. The KeepPassium author actually took a stand a went FOSS as a principle. I think this is worth noting.)
..and few more.
âŠ
âŠ
# The ones I support by paying for one of its services bust mostly because its FOSS app:
- https://vorta.borgbase.com
- http://ente.io (But sadly not for long; because I really can't stand a non-native "photos" app. I just can't! Otherwise it's a great service!)
- Homebrew: https://github.com/Homebrew/brew#donations
- Free Software Foundation (FSF): https://www.fsf.org/about/ways-to-donate
- LibreOffice: https://www.libreoffice.org/donate/
In Ask HN: What projects do you donate to?Showing the 15 most recent of 201 sources. Enable JavaScript to search and browse every indexed mention.