Andrew Nesbitt
3f0f00fcf7
resolve_upstream walks upstream transitively with a per-walk visited set and hop budget so USN -> UBUNTU-CVE-* -> CVE-* resolves; related is consulted for bare CVE ids only when upstream is empty (AlmaLinux ALSA records). A record that reaches no CVE is kept as-is rather than dropped. CPANSA advisories with no CVE alias (102 in the current feed) become hits directly via a synthesised Vulnerability instead of being dropped when their id 404s at OSV. CVE-bearing advisories keep the OSV record as canonical, falling back to the synthesised one only if the fetch fails. prefetch_vulnerabilities warms the record cache for a chunk's stub ids in bounded-concurrency batches before per-formula processing, so resolve_upstream reads mostly from cache instead of issuing serial GETs. range_status returns [status, evidence] so first_fixed_version can re-run the same evidence's range check against each historical subject version, preserving last_affected and exclusive-bound semantics instead of collapsing to a >= threshold. to_brew_record only sets fixed on state == :fixed and records range_state in ecosystem_specific. dev-cmd/advisory-match: --all now conflicts with --json (JsonEmitter accumulates); the text report shows the three-state result.
🍺 Homebrew
See Homebrew's homepage at brew.sh for installation instructions, what homebrew does, packages, brew bundle and more.
💸 Donations
Homebrew is a non-profit project run entirely by volunteers, not employees. We need your funds to pay for software, hardware and hosting around continuous integration and future improvements to the project. Every donation will be spent on making Homebrew better for our users.
Please consider a regular donation through GitHub Sponsors, Open Collective or Patreon. Homebrew is fiscally hosted by the Open Source Collective.
📚 Documentation
Read the Homebrew manual with man brew.
Read installation,
troubleshooting,
contribution
including the FAQ on docs.brew.sh.
Read the Homebrew Blog for release notes, project updates and announcements.
📦 Packages
Find formulae, casks, dependencies, versions and package metadata on formulae.brew.sh.
View anonymised install, build and operating system usage data at formulae.brew.sh/analytics.
Read how Homebrew uses Anonymous Analytics.
🔧 Get Help
First, please run brew update and run (and read) brew doctor.
Second, read the Troubleshooting Checklist.
If you don't read these it will take us far longer to help you with your problem.
After this, if you still need help, please ask in Homebrew/discussions or follow (and read) the Homebrew/brew new issue chooser.
💬 Social
Follow Homebrew on Mastodon, Bluesky, 𝕏 (Twitter) or subscribe to the newsletter.
🤝 Contributing
We'd love you to join us and >10,000 others by contributing to Homebrew!
First, please read our Contribution Guide and Code of Conduct.
A good starting point for contributing is:
brew tap --force homebrew/coreorbrew tap --force homebrew/cask(depending on whether you'd rather work on formulae or casks)- perform a strict audit on a package you use e.g.
brew audit --strict ffmpegfor FFmpeg - if no warnings, run
brew audit --strictto run on all packages and pick one to fix - read through the warnings and fix them until
brew audit --strict <package>shows no results - submit a pull request with your fixes
Alternatively, for something more substantial, check out one of the open issues in Homebrew/brew, Homebrew/homebrew-core or Homebrew/homebrew-cask.
If you've had inspiration for a new feature or bug fix: we don't need you to open an issue first, just open a pull request with your implementation and we'll review it.
Good luck!
🔐 Security
Please see our security policy for how to report security issues and what is in scope.
👥 Who We Are
Homebrew's Project Leader is Mike McQuaid.
Homebrew's Lead Maintainers are Bevan Kay, Carlo Cabrera, Issy Long, Justin Krehel, Michael Cho, Mike McQuaid, Nanda H Krishna, Patrick Linnane, Rui Chen, Ruoyu Zhong, Sam Ford and Sean Molenaar.
Homebrew's other Maintainers are Andrew Nesbitt, Anton Melnikov, Bo Anderson, Branch Vincent, Caleb Xu, Daeho Ro, Douglas Eichelberger, Dustin Rodrigues, FX Coudert, Klaus Hipp, Markus Reiter, Michka Popoff, Rylan Polster, Stefan Baebler, Thierry Moisan and William Woodruff.
Homebrew was originally created by Max Howell.
📜 License
Code is under the BSD 2-clause "Simplified" License. Documentation is under the Creative Commons Attribution license.
💛 Sponsors
Our macOS continuous integration infrastructure is hosted by MacStadium's Orka.
Secure password storage and syncing is provided by 1Password for Teams.
https://brew.sh's DNS is resolving with DNSimple.
Homebrew is generously supported by Joshua Baer, Randy Reddig, Codecademy, b.well, Workbrew, GitHub, Custom Ink, SAP and many other users and organisations via GitHub Sponsors.
