mrkeyoor.com_
Tue 01 Sept 21:46 UTC
Dev Toolsevaluationupdated 01 Sept 2026

brew review

Homebrew is a package manager that gives developers one command-line place to find, install, update, and troubleshoot software. It organizes command-line packages as formulae and desktop applications as casks, while `brew bundle` helps describe a machine's tool set.

trackingstars / 7d
Verdict

Our measured install completed in 23 seconds and the build finished in 7 seconds. Homebrew is an easy recommendation for developers who want its formula-and-cask ecosystem and accept a conventional command-line workflow. Its documentation, same-day release activity, and low open-issue count inspire confidence, but our sandbox result covered only the formula-analytics subproject and found no runnable test target.

We ran it

Install✓ · 23s41 packages · 192 MB
Build✓ · 7s
Testsn/ano test script
Known vulns0(pip-audit)
Repo2719 files~292,152 lines of source · 15.8 MB · 25 CI workflows

Answers from our run

Does brew build from source?

Dependencies installed in 23 seconds (41 packages), and the build succeeded in 7 seconds. We cloned commit 518895a into a clean Debian container with 3 CPUs and no project-specific setup.

Does brew have tests you can run?

Not through a standard command: the project exposes no test script or target that our harness could run.

Does brew have known vulnerabilities in its dependencies?

pip-audit found none in the dependency tree at the time of our run.

Who should not use brew?

People who need formally reproducible, isolated environments as the main design goal

What are the alternatives to brew?

MacPorts, Nix, pkgsrc. Our measured install completed in 23 seconds and the build finished in 7 seconds.

Setup4/5Measured subproject installed in 23s; full setup was not exercised
Docs5/5Manual, installation, troubleshooting, FAQ, and contribution guides
Community5/549,348 stars, 11 open issues, and same-day repository activity
Maturity5/5Established governance, package ecosystem, and BSD-2-Clause license

Who it’s for

macOS developers who want a familiar command-line package workflow
Teams that want to describe workstation dependencies with brew bundle
Contributors willing to audit and improve formulae or casks
Users who value extensive manuals, troubleshooting guidance, and package metadata

Who it’s NOT for

People who need formally reproducible, isolated environments as the main design goal
Users who want a graphical app store with no terminal work
Teams unwilling to run brew update and brew doctor when diagnosing problems
Anyone treating our Debian subproject build as proof that the complete Homebrew client was tested

Setup reality

We installed the measured Python subproject in 23 seconds, with 41 packages taking 192 MB, and its build succeeded in 7 seconds. Tests were skipped because there was no test script or target. That is a smooth result, but it applies to Library/Homebrew/formula-analytics/ inside the repository, not a full end-to-end Homebrew installation. The README sends ordinary users to brew.sh for installation rather than providing the command inline, so expect a quick guided setup but do not confuse our successful subproject build with complete client validation.

Homebrew turns workstation setup into a package workflow

Homebrew is the command-line package manager many developers encounter when they need software that is not already on their machine. The project gives packages a common vocabulary: formulae for command-line software, casks for applications, and brew bundle for describing a broader tool set. That scope makes it more than an installer. It becomes part of workstation setup, day-to-day upgrades, and recovery when a local environment drifts. At 49,348 GitHub stars, this is plainly an established project rather than an experimental utility.

The repository is written primarily in Ruby, but the README keeps the front door deliberately simple. Installation lives on brew.sh, the manual is available through man brew, and package metadata has a separate home at formulae.brew.sh. Users also get direct routes to installation, troubleshooting, an FAQ, release notes, and anonymous usage analytics. Version 6.0.21 was released on September 1, 2026, so the documentation is attached to a project shipping current code, not merely preserving old instructions.

What happened when we ran it

Our run needs careful interpretation because the detected project lived in Library/Homebrew/formula-analytics/, a Python subproject inside the much larger Ruby repository. In a fresh unprivileged Debian container with 3 CPUs and 8 GB of RAM, installation succeeded in 23 seconds. It installed 41 packages and occupied 192 MB on disk. The build then succeeded in 7 seconds. No test script or target was available, so tests were skipped rather than passed. A dependency audit reported 0 known vulnerabilities.

Those are encouraging setup signals for the component we could exercise, but they are not an end-to-end benchmark of Homebrew itself. The checkout contained 2,719 files, about 292,152 lines of source, and measured 15.8 MB. We also found 25 CI workflow files, no Dockerfile, and no tests directory. That profile suggests substantial automation around a large repository, while the missing local test target means our box could not independently verify behavior after the successful build.

The documentation tells users what to do next

Homebrew's strongest practical feature in the supplied material is not a clever command, it is the clear operating path around the commands. The help sequence starts with brew update and brew doctor, then directs users to a troubleshooting checklist, discussions, and a structured issue chooser. That ordering can prevent stale metadata and local configuration problems from becoming noisy bug reports. The README also points contributors toward brew audit --strict, with a concrete process for selecting a package, fixing warnings, and submitting a pull request. More than 10,000 people are said to have contributed.

The package catalog is similarly well separated from the core repository. Formula and cask pages expose versions, dependencies, and package metadata, while analytics are documented rather than hidden. The README identifies a project leader, 12 lead maintainers, and 15 other maintainers, which makes governance unusually visible for a tool of this scale. Funding and infrastructure dependencies are also disclosed, including volunteer operation, fiscal hosting, CI hosting, password tooling, and DNS support. The BSD 2-clause license is straightforward for the code.

The rough edges are mostly about expectations

The top-level README is a directory to other documentation, not a self-contained setup guide. That is reasonable for an established ecosystem, but it means a reader cannot install from this page alone without following brew.sh. Support is also intentionally procedural: users are expected to update, run diagnostics, read the checklist, and only then ask for help. That discipline helps maintainers, but people expecting concierge-style troubleshooting may find it blunt. Our measured component had no test target, so a 7-second successful build should not be mistaken for behavioral coverage.

The repository is also broad enough that automated detection can land on a nested component, as ours did. Its 192 MB installed footprint and 41-package dependency set describe formula-analytics, not the normal cost of installing Homebrew or any formula. There is no Dockerfile in the measured checkout, which matters if your standard evaluation path assumes a container entry point. None of these findings makes Homebrew unreliable; they define the limits of what this particular sandbox run established.

Current activity supports confidence, with one caveat

The health snapshot is strong. The latest release, 6.0.21, and the last repository push both occurred on September 1, 2026, the review date. Only 11 issues were open in the supplied repository snapshot, alongside high adoption and named maintainers. Release and push activity together are better evidence of active stewardship than a release tag alone. We cannot calculate a historical release cadence from a single latest-release record, but there is no sign here of an abandoned project.

It belongs at the developer-workstation layer

Homebrew fits at the base of a developer machine, below language-specific tools and project dependency managers. Use it to obtain system commands, applications, and shared utilities; then let tools such as a project's Python or JavaScript package manager control application libraries. brew bundle is useful when a team wants a readable inventory of workstation software, but teams requiring isolated, reproducible stores should evaluate Nix, while ports-oriented macOS users may prefer MacPorts. For the mainstream formula-and-cask workflow, Homebrew remains the sensible default, backed by current version 6.0.21 activity and unusually clear operational documentation.

Alternatives

ProjectWhat it isPick it when
MacPortsA ports-based package manager focused on macOS.pick this instead when you prefer the MacPorts ports tree and its conventions.
NixA package manager built around isolated stores and declarative environments.pick this instead when reproducibility and multiple coexisting package versions matter more than familiarity.
pkgsrcA portable package collection used across several Unix-like systems.pick this instead when one ports collection must span more operating systems.

What people are saying

  1. [velocity-scout] Homebrew/brew

Sources

  1. Homebrew/brew repository
  2. Homebrew homepage

More dev tools reviews

workmux · v2rayNG · SecLists · hashcat · eslint · fastfetch · the whole board →