Insights on enterprise package management, security, and DevOps.
Three Cyber Essentials Plus tests land on a developer Mac, and Homebrew is usually what fails them: the 14-day patch rule, admin rights, and software nobody inventoried.
Homebrew is well-engineered and widely trusted — and still a governance gap in most companies. An honest look at where the real risks are, and what IT can do about them.
The package manager on nearly every developer Mac, explained for the people who have to manage those Macs: how it works, why developers rely on it, and what it means for IT.
Open-source licenses like GPL and AGPL create real legal exposure for commercial software — and they slip in through dependencies nobody reviewed. Here's how to close that gap without slowing developers down.
The instinct to block Homebrew across the fleet is understandable. Here's why it consistently backfires — and what actually works instead.
A practical guide for IT and security teams on identifying high-risk Homebrew packages and enforcing block policies across macOS and Linux developer fleets — without disrupting developer workflows.
Sync device groups from your MDM, keep a live inventory of every brew package, and hand auditors the reports they ask for — without changing how developers work.
Unmanaged brew installs are invisible to IT: no audit trail, no CVE checks, no policy. Here is what that exposure looks like in practice — and how to close it without slowing developers down.