I love how homebrew makes my life easier! Though, I just realized that I don't really know who is "signing off" the stuff I get installed through it. So, I ask:

  • Is there a central repo (like Linux distro PPAs)?
  • Or is it all decentralized (ie. code gets downloaded simultaneously from Github, Source Forge, etc)?
  • What mechanisms are in place to prevent trojan horses from being installed through brew?

If you look at the details of a homebrew package (e.g. on http://braumeister.org), you'll find the address of the source code in the ruby script. So it is not stored in a centralized manner but directly on GitHub etc.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .