diff options
Diffstat (limited to 'Brewfile')
| -rw-r--r-- | Brewfile | 28 |
1 files changed, 12 insertions, 16 deletions
@@ -41,23 +41,19 @@ cask "neovide-app" cask "keepingyouawake" # menu-bar toggle that stops the Mac sleeping cask "jordanbaird-ice" # Ice: hides and arranges the menu bar itself -# Neither of these is in homebrew-cask, so they come from their authors' own -# taps, with what that means: nobody reviewed the cask, and the tap can change -# what it installs between two runs of install.sh, which applies this file -# again every time. brew will not load a cask from an unofficial tap until it -# is trusted, once per machine, which cannot be expressed here -- install.sh -# does it, so the decision sits in a tracked file rather than in a README -# someone pastes from. -tap "satrik/togglemute" +# Not in homebrew-cask, so it comes from the author's own tap, with what that +# means: nobody reviewed the cask, and the tap can change what it installs +# between two runs of install.sh, which applies this file again every time. +# What earns it that: the app is signed with a Developer ID and notarized +# (checked 2026-10-01), so macOS can still say who shipped it. +# +# toggleMute was here too and was dropped: ad-hoc signed, no TeamIdentifier, +# and `spctl -a` rejecting the bundle as modified since signing. It only runs +# with its quarantine flag cleared, and nothing in a shared setup script should +# quietly put an unverifiable binary past Gatekeeper on every machine. tap "b451c/quickmd" -cask "satrik/togglemute/togglemute" # menu-bar mic mute, and it follows the - # hardware mute button on a headset. - # Ad-hoc signed, no Developer ID, and - # spctl calls the bundle modified, so it - # only opens once install.sh clears its - # quarantine flag -- see the note there -cask "b451c/quickmd/quickmd" # qmd.app: native markdown viewer, live - # preview, AppKit rather than Electron +cask "b451c/quickmd/quickmd" # qmd.app: native markdown viewer, live preview, + # AppKit rather than Electron # Only where no Ghostty is installed yet: a machine running the ghostty@tip # build would collide with a second cask over /Applications/Ghostty.app. |