shouldiuse.io

New check

Categories

VERDICT

Should I use Homebrew?

The Package Manager for Everywhere. - brew.sh

Worth it. Adopt it if you're a developer or terminal-comfortable Mac/Linux user — it's free, standard, and saves real setup time. Skip it if you're non-technical, on a locked-down corporate Mac, or need vendor support and hard security guarantees.

Confidence

Medium. Based on ~20 public sources; many search results were off-topic (beer brewing, D&D homebrew) and excluded.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support qualityNo support evidence; community docs only
  • Security posture

Pricing

Free

Homebrew

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes

Best for

  • macOS and Linux developers
  • Terminal-comfortable power users
  • Teams scripting new-Mac setup
  • Free open-source CLI installs

Not for

  • Non-technical users who install a few App Store apps
  • Locked-down corporate Macs without IT sign-off
  • Anyone needing SLAs or vendor support
  • High-security environments that can't accept supply-chain risk

Gotchas - check before you buy

high

Supply-chain exposure: no CVE gating historically; malicious campaigns target users. Vet what you install.

medium

No vendor support or SLAs; businesses pay third parties like Workbrew for that layer.

medium

Slow-performance complaints are common enough to spawn faster alternatives.

low

6.0's new security mechanism changes workflows; existing setups need review.

Pros and cons

Pros

  • Free, open-source, non-profit — no paid tier exists
  • De facto Mac standard with a large formula catalog
  • Called the best free source of open-source software on Mac
  • Users say it's 'absolutely worth it', even for new Mac users
  • Security-audited in 2023; 6.0 added a new security mechanism

Cons

  • Own docs state Homebrew 'provides no security' guarantees
  • Remote code execution vulnerability, CVE-2024-42381, in brew
  • Info-stealer malware campaigns have targeted Homebrew users
  • Criticized as slow; faster forks claim 5-20x speedups
  • Some users call it 'a major risk' on their Mac

Sources & method

Analyzed 9/24/2026 - 14 sources - Real supply-chain exposure: one RCE CVE and info-stealer campaigns, but audited in 2023 with hardening since (6.0).

official x2review x4security x4news x4
  • CVE-2024-42381 — brew remote code execution, Remote code execution vulnerability in brew, per SentinelOne's vulnerability database.
  • Info-stealer malware targeting Homebrew users, A malicious campaign targeted macOS Homebrew users with information-stealer malware.
  • No security guarantees by default, Official docs state Homebrew provides no security assurances; users own package vetting.

Key stats

  • Value for money: 5/5

    Rating

  • Free

    Starting price

  • 14

    Sources

  • Analyzed

  • Value for money: 5/5. Free forever; non-profit, no paid tier
  • Ease of use: 4/5. New Mac users say 'absolutely worth it'
  • Feature depth: 4/5. Huge formula catalog; runs beyond macOS now
  • Support quality. No support evidence; community docs only
  • Security posture: 2/5. RCE CVE, malware campaigns; audited, hardening ongoing
  • $0 Price Free, open-source, non-profit
  • Yes Free tier The whole product is free
  • 52M/mo Scale Reported package requests per month
  • 320 companies Adoption Per TheirStack tech-usage data

Pricing

Homebrew

Free

  • Full package manager
  • Community support via docs and GitHub
  • Donor-funded non-profit

Security

Real supply-chain exposure: one RCE CVE and info-stealer campaigns, but audited in 2023 with hardening since (6.0).

  • CVE-2024-42381 — brew remote code executionRemote code execution vulnerability in brew, per SentinelOne's vulnerability database.⁵
  • Info-stealer malware targeting Homebrew usersA malicious campaign targeted macOS Homebrew users with information-stealer malware.⁶
  • No security guarantees by defaultOfficial docs state Homebrew provides no security assurances; users own package vetting.³

What users say

Developers broadly praise Homebrew for effortless Mac setup and updates, while security-minded users warn it's a supply-chain risk.

“Absolutely worth it.”
Reddit, r/mac
“I find it useful to upda...”
Reddit, r/MacOS
“While I use Homebrew on my Mac — it is a major risk.”
Hacker News

Alternatives

Compare Homebrew with each alternative.

  • MacPorts

    Mature Mac alternative; self-contained installs, more conservative

  • Nix

    Reproducible, declarative packages; steeper learning curve

  • zerobrew

    Experimental drop-in; claims 5-20x faster installs

Full analysis

Based on ~20 public sources; many search results were off-topic (beer brewing, D&D homebrew) and excluded.

Free, open-source package manager and the de facto Mac dev standard. Adopt it; casual users won't need it.

Methodology

Based on ~20 public sources; many search results were off-topic (beer brewing, D&D homebrew) and excluded.

Sources

  1. Homebrew — The Package Manager for Everywherebrew.sh
    official
  2. homebrew-core formula listingformulae.brew.sh
    official
  3. Homebrew Security and Supply Chain (docs)docs.brew.sh
    security
  4. 2023 Security Auditbrew.sh
    security
  5. CVE-2024-42381: brew RCE Vulnerabilitysentinelone.com
    security
  6. Homebrew macOS Users Targeted With Information-Stealer Malwaresecurityweek.com
    security
  7. Homebrew 6.0 released with new security mechanismtheregister.com
    news
  8. Homebrew really worth it? new mac user herereddit.com
    review
  9. Homebrew... Love it/Hate it?reddit.com
    review
  10. While I use Homebrew on my Mac — it is a major risk.news.ycombinator.com
    review
  11. How to use Homebrew on Macappleinsider.com
    review
  12. How Homebrew serves 52M packages per monthbetterprogramming.pub
    news
  13. Companies that use Homebrew (320)theirstack.com
    news
  14. zerobrew: a 5-20x faster experimental Homebrew alternativegithub.com
    news

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.