Homebrew 7 adds vulnerability checks, ends Intel Mac support in September 2027

Why it matters

Homebrew is becoming a security and policy layer for developer machines while its Intel cutoff shows how quickly volunteer infrastructure must follow platform owners.

Homebrew released version 7.0.0 on September 13th, adding built-in vulnerability checks, a native macOS interface and more concurrent package installation while moving Intel Macs into its lowest support tier.

Mike McQuaid, Homebrew's project leader, framed the major release around speed and security. The deeper change is one of scope. Homebrew is taking responsibility for more of the software supply chain around each installation, from vulnerability data and sandbox boundaries to the interface developers use to inspect packages.

McQuaid has maintained Homebrew since 2009, the year Max Howell created it, and says he will mark 17 years on the project this month. His resume records a decade at GitHub, where he finished as a principal engineer and worked on Merge Queue, Codespaces adoption, GitHub Sponsors and internal developer tooling. He is now CTPO at Administrate alongside his Homebrew role.

That background helps explain the shape of 7.0.0. The release concentrates on the unglamorous systems that make developer infrastructure dependable: parallel work, structured package operations, machine-readable diagnostics, narrower privileges and explicit deprecation schedules.

Homebrew takes on vulnerability reporting

The new brew vulns command checks installed packages, dependencies and Brewfiles against OSV.dev and Homebrew's advisory database. It can filter results by severity and distinguish vulnerabilities with an available fix from those without one.

The command queries OSV.dev and uses package metadata, including software bills of materials where available, to identify the version actually installed. Homebrew has also opened an advisory database containing OSV-format records for formula versions and revisions where Homebrew has applied security patches.

Homebrew 7.0.0 also closes a moderate-severity macOS sandbox escape in which a malicious cask could use LaunchServices to execute code outside the installation sandbox. The fix restricts application launches, Mach services and Unix socket connections during cask installation. Other changes prevent sandboxed package operations from reading a user's home directory by default and continue moving downloads into a separate fetch phase so installation can run without network access.

McQuaid's release notes keep the limits visible. Applications installed through Homebrew still run with the user's privileges, and vendor .pkg installers operate outside Homebrew's sandbox and may request sudo. Trusting a third-party tap remains the consequential security decision.

That builds on Homebrew 6.0.0's tap trust controls.

On Linux, Homebrew has replaced the Bubblewrap sandbox introduced in 6.0.0 with Landlock, avoiding an external dependency and elevated Docker permissions. Linux kernels without Landlock continue to work without that protection, with brew doctor reporting the missing sandbox as an advisory.

Faster installs and a window outside Terminal

Homebrew says installations and upgrades are faster because downloads, package preparation and installation can overlap. The change applies to brew install, brew reinstall, brew upgrade and multi-package brew bundle runs. Diagnostics, tap metadata collection and cache cleanup also perform more work concurrently.

The release does not attach a single benchmark to those changes, and the payoff will vary by package mix, network speed and cache state. The architectural shift is still clear: commands that previously waited through sequential preparation and network stages can now share work across packages.

Homebrew 7.0.0 also introduces BrewUI, a native macOS graphical application. The release lists the app among version 7's major changes, giving Homebrew a graphical front end alongside its command-line interface.

Intel support reaches the maintenance limit

Homebrew 7 moves Intel macOS 11 or later to Tier 3, stops producing new bottles for the architecture and schedules the end of Intel support for September 1st, 2027. Some existing bottles may continue to work. Homebrew's installation documentation permits limited community help through Homebrew Discussions, though the project does not support Tier 3 configurations.

The release directs users who intend to keep Intel machines toward MacPorts, which continues to provide Intel support. macOS Catalina 10.15 and earlier are unsupported immediately, while macOS Sonoma 14 has also moved to Tier 3.

The 7.0.0 release sets that timetable as operating policy. Apple has removed Intel support from macOS 27, and GitHub plans to retire Intel macOS runners in 2027. Homebrew's volunteers would otherwise have to replace infrastructure that two platform owners have chosen to discontinue.

That tradeoff matters because Homebrew operates at a scale that resembles commercial infrastructure without a commercial staffing model. Its public analytics recorded 16,737,488 formula-install events during the 30 days ending in August 2026. The figure counts installation events rather than unique users, but it shows the workload sitting behind routine commands developers expect to work.

Homebrew's governance documentation says maintainers have voting rights on governance and project direction, while the elected project leader serves as the project's primary public representative and project-wide coordinator. The release describes Homebrew as entirely volunteer-run and asks users to fund software, hardware and continuous integration through donations and sponsorships.

McQuaid has also seen the commercial demand around that infrastructure. He co-founded Workbrew, a company selling fleet management and policy controls around Homebrew, in 2023. He left operational duties in 2025 and is listed as an adviser or fellow. Homebrew remains a separate open-source project.

Version 7.0.0 shows where McQuaid and the maintainers have chosen to spend scarce capacity: making common operations faster, turning security knowledge into a command developers can run, and supporting Apple's current hardware. Intel maintenance is the bill Homebrew has decided it can no longer carry.