Remote code execution in Homebrew by compromising the official Cask repository
The case against using homebrew mounts daily.  Their poor decisions (regarding all of engineering, community/social, and privacy) are numerous enough for a non-listicle blog post at this point.<p>I switched to using Nix on macOS to manage packages, and it's <i>fantastic</i>.  The nix concept in general is wonderful, and there's a lot of work put in to making it work well on the mac.  I haven't missed `brew` at all.