security2 publishers
Seven of Homebrew's eight advisories shipped before 7.0.0, including the sudo-level cask bug
Homebrew rated the unsigned cask removal metadata path High and closed it back in 6.0.12. The 7.0.0 upgrade adds one Moderate sandbox escape through LaunchServices, plus a scanner for installed formulae.
Reality
- Evidence68
- Adoption32
- Hype gap+12
- Incentives38
- Confidence74