Homebrew 7.0.0 Launches Native GUI and Built-In Vulnerability Scanner
Homebrew, the popular open-source package manager for macOS, releases version 7.0.0 with significant security upgrades and a fully released native graphical interface called BrewUI. The project, which boasts 49k stars on GitHub, allows users to install software and manage dependencies in a way similar to Linux package managers. Because of its popularity, threat actors frequently target Homebrew users with info-stealer malware through clone sites and ClickFix lures, making the new security features especially relevant.
The new Brew interface, available on macOS 26 Tahoe and later, lets users browse and search for packages, inspect them, and manage their dependencies through a graphical environment. Alongside the GUI, Homebrew introduces a new vulnerability scanning command, "brew vulns," which checks installed formulae, a specific formula, or all packages and dependencies declared in a Brewfile. The scanner identifies the upstream software repository and version for each formula, queries OSV.dev in batch, retrieves vulnerability records, and applies optional severity filters while accounting for security patches Homebrew has already applied.
Version 7.0.0 also debuts a Homebrew-specific advisory database that publishes OSV-format records documenting vulnerabilities affecting Homebrew formula versions and revisions, including fixes that are backported without changing the upstream software version. The advisory findings are available through the formula API and a downloadable advisory index, allowing other tools to distinguish outstanding vulnerabilities from already patched ones. Together, these additions give macOS users stronger visibility into the security posture of their installed packages.