Homebrew has rolled out version 7.0.0, bringing a host of new features aimed at improving security and efficiency. This latest update introduces a built-in vulnerability scanner, a dedicated advisory database, and enhanced package sandboxing. Users will also experience faster package installation processes.
Key Features of Homebrew 7.0.0
One of the most notable additions in this release is the new vulnerability scanning feature, accessible through the brew vulns command. This tool allows users to check their installed formulae for known vulnerabilities using Homebrew’s advisory database and OSV.dev’s data, without needing separate installations.
The scanner can evaluate installed formulae, dependencies, and Brewfiles, providing options to filter results by severity, identify available fixes, and flag unresolved vulnerabilities. This makes it particularly beneficial for developers, CI pipelines, and security audits.
Enhanced Security Measures
Homebrew 7.0.0 strengthens package isolation on both macOS and Linux. Mac users will find enhanced sandboxing that restricts formula and cask operations, minimizing the risk of unauthorized access to personal files. The update also introduces private temporary directories to facilitate secure build-tool communications.
On the Linux front, Homebrew transitions from Bubblewrap to Landlock for sandboxing, avoiding previous deployment issues. This change does not hinder systems without Landlock, though they will receive a notification from brew doctor regarding the missing protection.
Performance Improvements and Future Plans
Performance has been a key focus in this update. Homebrew 7.0.0 optimizes various processes by overlapping downloads and installation tasks, reusing parsed API data, and reducing subprocesses. Additionally, it discontinues support for macOS Catalina 10.15, with Intel Macs now classified as Tier 3, signaling a gradual phase-out by 2027.
The update addresses a moderate-severity issue that previously allowed code execution outside the macOS sandbox. By restricting application launching and network access during installation, Homebrew ensures a more secure environment for its users.
Overall, Homebrew 7.0.0 offers significant advancements in security and efficiency, setting a new standard in software management tools. Users are encouraged to explore these features to enhance their workflows and protect their systems.
