Live data from Hacker News

Homebrew 4.0.0

brew.sh

31–40 of 403 posts

Re: Homebrew 4.0.0

#31

On macOS, has anyone moved from/to MacPorts to/from Homebrew? Why did you move? What are the pros and cons of each system?

Moved a long time ago, mostly because MacPorts installed their whole own world of dependencies, while Homebrew used system libraries where possible.

Re: Homebrew 4.0.0

#32
post #9

Earlier quoted context omitted.

That’s not the point. I don’t want any software sending analytics unless I specifically allowed it.

You know, as the law requires in the EU

That is not actually how the GDPR works. Anonymous telemetry without PII does not need any consent.

Re: Homebrew 4.0.0

#33
I despise, despise, Homebrew's "we know better than you" approach to always installing the latest versions of every dependency. How tf is this fine? They don't even offer alternative. They just say "we can't test all of the packages installed and all version combinations, so this is the best we can do". Well, no one asked you to test my exact setup. All I'm asking for is: if I have perfectly working Node 18 and I need to install fcking Shopify CLI, don't fcking install Node 19 and break my whole setup! Tf?!

Re: Homebrew 4.0.0

#34
post #9

Earlier quoted context omitted.

That’s not the point. I don’t want any software sending analytics unless I specifically allowed it.

You know, as the law requires in the EU

Besides consent there is also the possibility of legitimate interest under the GDPR.

Re: Homebrew 4.0.0

#35
post #2

> Homebrew’s analytics are now sent both to Google Analytics and our new, self-hosted InfluxDB instance hosted in the EU. > If you had previously set HOMEBREW_NO_ANALYTICS because you didn’t like Google Analytics and/or data being sent to the USA: please consider unsetting this and setting HOMEBREW_NO_GOOGLE_ANALYTICS instead, allowing analytics data to be sent to our new InfluxDB host. My package manager was reporti…

No kidding. First I’m hearing about it.

Re: Homebrew 4.0.0

#36

I despise, despise, Homebrew's "we know better than you" approach to always installing the latest versions of every dependency. How tf is this fine? They don't even offer alternative. They just say "we can't test all of the packages installed and all version combinations, so this is the best we can do". Well, no one asked you to test my exact setup. All I'm asking for is: if I have perfectly working Node 18 and I nee…

[deleted]

Re: Homebrew 4.0.0

#37
post #12

I wish we could get the industry to understand that when you build-in analytics and make it hard for people to opt out, you're using their resources. Sure, people don't pay for things like Homebrew (can they even?) - but this is no reason to extract resources from end users without their consent or agency. I have to work very hard to get something like Homebrew installed and in-use in my organization - the IT guys de…

How is it hidden or hard to opt-out? From https://docs.brew.sh/Analytics you can opt out using:

  export HOMEBREW_NO_ANALYTICS=1
-or-

  brew analytics off
The installer gives a warning message before sending the first analytics, with a pointer to the above URL for how to disable analytics. From install.sh:

  ring_bell

  # Use an extra newline and bold to avoid this being missed.
  ohai "Homebrew has enabled anonymous aggregate formulae and cask analytics."
  echo "$(
    cat 
> and showed me what was being sent (instead of obfuscating it),

According to that https://docs.brew.sh/Analytics page, to see what it sends:

  You can also view all the information that is sent by Homebrew’s
  analytics by setting HOMEBREW_ANALYTICS_DEBUG=1 in your environment.
  Please note this will also stop any analytics from being sent.
I verified that using it dumps JSON analytics to the terminal, and it didn't seem that obfuscated, given the documentation in that Analytics page.

Re: Homebrew 4.0.0

#38
post #21

Earlier quoted context omitted.

Why don't they just use something like plausible for this? I switch to plausible for all my analytics and it works great. https://plausible.io/

Thanks for sharing. I was looking for other options and this looks like a good candidate. Does you or anyone else have any other suggestions?

jitsi as in a segment alternative?

Re: Homebrew 4.0.0

#39

I despise, despise, Homebrew's "we know better than you" approach to always installing the latest versions of every dependency. How tf is this fine? They don't even offer alternative. They just say "we can't test all of the packages installed and all version combinations, so this is the best we can do". Well, no one asked you to test my exact setup. All I'm asking for is: if I have perfectly working Node 18 and I nee…

You could always manage your packages and their dependencies yourself.

Or you could release a new package manager which does provide support for that functionality, build out a team of maintainers, and stay on top of all the releases

Re: Homebrew 4.0.0

#40

I despise, despise, Homebrew's "we know better than you" approach to always installing the latest versions of every dependency. How tf is this fine? They don't even offer alternative. They just say "we can't test all of the packages installed and all version combinations, so this is the best we can do". Well, no one asked you to test my exact setup. All I'm asking for is: if I have perfectly working Node 18 and I nee…

You can specify specific package versions in brew if you want specific versions pinned.

The default behaviour of using the latest in repo is correct and is how every package manager works. It’s the behaviour people expect and it’s the behaviour that is arguably more secure (the fact that homebrew is bleeding edge does create issues here but generally speaking my point stands).

I believe you pin using the @ symbol followed by a version number. Eg brew install awesome-project@13.0

Post reply on HN