Homebrew’s new “trusted tap” rule forces explicit vetting of all packages
Homebrew 6.0.0 now blocks any installation from unapproved taps, requiring a brew trust command before a package can be installed. The move mirrors recent npm hardening and aims to stop supply‑chain attacks on macOS and Linux users, forcing maintainers and CI pipelines to declare trust explicitly.