Homebrew 7.0.0 adds native interface and integrated vulnerability checks
The open-source package manager Homebrew has released version 7.0.0, featuring a fully functional graphical interface called BrewUI for macOS 26 and later. It also introduces a new command, brew vulns, that scans installed formulae against a dedicated advisory database and queries OSV.dev for known vulnerabilities. The update strengthens security by helping users identify unpatched packages and includes backported fixes in its own advisory records.
Homebrew’s new BrewUI arrives exclusively for macOS 26 “Tahoe” and later, marking a shift from command-line-only management to a graphical browsing and dependency inspection tool. The integrated `brew vulns` command queries OSV.dev using upstream repository and version data, then cross-references Homebrew’s own advisory database, which includes backported fixes that don’t alter the upstream version. This database is published in OSV format under a CC0 license, allowing third-party security tools to reuse the data. The release also tightens sandboxing by blocking home directory access by default and separates network-dependent downloads from offline installation, while concurrent package preparation speeds up installs.
This update could meaningfully reduce the window in which macOS users run unpatched open-source software, especially those who rely on Homebrew for development tools. By making vulnerability scanning a native command and sharing advisory data publicly, it may encourage more proactive security hygiene among individual developers and small teams. However, its impact depends on adoption of macOS 26, and the GUI’s exclusivity could leave older systems without the same visibility, potentially widening security gaps between user groups.