Homebrew: Faster Installs, a New Vulnerability Feed
Homebrew shipped a cluster of install-performance fixes around parallel downloads and caching, while a new vulnerability-advisory export pipeline matured through four follow-up pull requests in two days.
Duration: PT2M37S
Episode overview
This episode is a short developer briefing from Homebrew.
It explains recent repository work in plain language.
- Show: Homebrew
- Published: 2026-07-15T13:14:35Z
- Audio duration: PT2M37S
Transcript excerpt
This excerpt keeps the crawler page concise. Listen to the episode or use the RSS feed for the full update.
Good morning. It's July 15th, 2026, and this is Homebrew.
The big story today is speed. A trio of merged pull requests reshapes how brew fetches and starts up. PR 23105 moves bottle downloads to start before dependency resolution finishes, overlapping network time with Ruby work. PR 23107 removes a wasted fifty-millisecond sleep loop in the download queue that was eating…
The second theme is the vulnerability advisory pipeline, which andrew built out across four connected pull requests. PR 23106 ported an OSV exporter into a hidden dev command so the advisory database tap can generate its own feed. PR 23112 then made that export merge into existing records instead of overwriting…
Worth flagging: PR 23061 removes the developer-only gating around cask FFI helpers, so quarantine, xattr, and trash operations no longer require Swift tooling for any user. And PR 23122 is still open, addressing casks with Linux-only checksums that currently fail to load on macOS.
What to remember: if you're profiling install performance, these queue and caching changes are now the baseline. And if you work with vulnerability data, expect the advisory format to keep evolving as this pipeline stabilizes.
That's…
Nearby episodes from Homebrew
- Cask Metadata Fallout and a Sorbet Speed Trip
- Shaving Milliseconds and Fixing Silent Failures
- Weekly Recap - Casks Get Faster, Safer, and Less Swift-Dependent
- Cask Security Gets Simpler and Safer
- Cask Installs Get Faster and More Permissive
- Cask Installs Get Faster and Safer
- Cleaning Up the Test Sandbox and Upgrade Edge Cases
- Cask Upgrades Get an Integrity Pass