Please do not open a public GitHub issue for security-sensitive bugs.

Email the maintainer via GitHub profile contact on will702, or open a private GitHub Security Advisory on this repository if enabled.

Include:

• Impact (e.g. unexpected command execution, path injection)
• Reproduction steps
• Affected commit / release if known

Homebrew Manager executes the local brew binary with user-confirmed arguments. Compromised taps/formulae or a malicious brew on PATH are outside this app’s control — treat brew trust the same as in Terminal.