Yeah I am not a fan of curl bash either, but installing via most package managers (brew, npm etc) isn’t much better, since most of these skip sandboxing rn.
Maybe I am missing something, but the second you run the code, it has the same powers and risk profile as a bash curled from the internet.
Maybe something about having explicit versioning?
(as an aside, I think this will change very soon…)
Yeah I am not a fan of curl bash either, but installing via most package managers (brew, npm etc) isn’t much better, since most of these skip sandboxing rn.
Maybe I am missing something, but the second you run the code, it has the same powers and risk profile as a bash curled from the internet. Maybe something about having explicit versioning?
(as an aside, I think this will change very soon…)
Homebrew is heavily sandboxed and has been using the macOS sandbox for the best part of a decade, long before many other package managers did.
We also offer a .pkg installer and other installation options so curl | bash not needed for install that either.
TIL! Thank you :)
I’ll take a look then, as I am unsure how sandboxing will interact with this system since it does a few unusual things
I'm glad someone made this site! Another good registry is https://github.com/aquaproj/aqua-registry