docs: retire the jbcom/homebrew-tap mirror — pkgs is the single tap#53
Conversation
The separate homebrew-tap (and empty scoop-bucket) repos are being deleted; brew consumers use the explicit-URL tap form against this repo. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
📝 WalkthroughWalkthroughHomebrew installation documentation now uses the explicit ChangesHomebrew documentation
Estimated code review effort: 1 (Trivial) | ~5 minutes 🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
![amazon-q-developer[bot]](https://avatars.githubusercontent.com/in/1220912?s=60&v=4){kind=small}
There was a problem hiding this comment.
The documentation updates consistently reflect the retirement of the jbcom/homebrew-tap mirror and the move to a single unified tap. The Homebrew installation instructions and architecture notes are accurate and properly document the explicit URL form requirement.
No blocking issues identified. Ready to merge.
You can now have the agent implement changes and create commits directly on your pull request's source branch. Simply comment with /q followed by your request in natural language to ask the agent to make changes.
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request updates the installation and architecture documentation to reflect the retirement of the old jbcom/homebrew-tap mirror and the transition to the single distribution repository jbcom/pkgs using an explicit URL. The review feedback suggests removing a reference to Casks/ in the README to avoid confusion, as the repository currently only contains Homebrew formulas.
Important
The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.
| The explicit URL form is required because this repo isn't named | ||
| `homebrew-pkgs`. Homebrew serves `Formula/` (and `Casks/`) straight from | ||
| this repo — the old `jbcom/homebrew-tap` mirror is retired; this is the | ||
| single distribution repo. |
There was a problem hiding this comment.
The repository layout (lines 42-65) does not list a Casks/ directory, and this repository currently only contains Homebrew formulas in Formula/. Mentioning (and Casks/) might be confusing to users looking for Casks. Consider removing it to keep the documentation accurate.
For example:
The explicit URL form is required because this repo isn't named
`homebrew-pkgs`. Homebrew serves `Formula/` straight from
this repo — the old `jbcom/homebrew-tap` mirror is retired; this is the
single distribution repo.![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: e72c2a66a1
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| The explicit URL form is required because this repo isn't named | ||
| `homebrew-pkgs`. Homebrew serves `Formula/` (and `Casks/`) straight from | ||
| this repo — the old `jbcom/homebrew-tap` mirror is retired; this is the | ||
| single distribution repo. |
There was a problem hiding this comment.
After retiring jbcom/homebrew-tap, the generated package index still tells Homebrew users to run brew tap jbcom/tap in src/data/pages/index.mdx:16. That command resolves to the retired mirror, so visitors using the public site—the primary package-install entry point—will not tap this repository. Update that page to the explicit jbcom/pkgs URL form as well.
Useful? React with 👍 / 👎.
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@README.md`:
- Around line 14-15: Update the Homebrew installation examples in README.md
lines 14-15 and docs/ARCHITECTURE.md lines 21-23 to use fully qualified tap
names: use jbcom/pkgs/<formula> for formula installs and jbcom/pkgs/<cask> with
--cask for cask installs in both locations.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: defaults
Review profile: CHILL
Plan: Pro
Run ID: ef5a148e-bb98-4773-aea0-6d8224a20b58
📒 Files selected for processing (2)
README.mddocs/ARCHITECTURE.md
| brew tap jbcom/pkgs https://github.com/jbcom/pkgs | ||
| brew install <package> |
There was a problem hiding this comment.
🎯 Functional Correctness | 🟠 Major | ⚡ Quick win
🧩 Analysis chain
🏁 Script executed:
#!/bin/bash
set -euo pipefail
printf '\n== README.md ==\n'
nl -ba README.md | sed -n '1,40p'
printf '\n== docs/ARCHITECTURE.md ==\n'
nl -ba docs/ARCHITECTURE.md | sed -n '1,60p'
printf '\n== Search for tap/install guidance ==\n'
rg -n "brew tap|brew install|fully qualified|Tap-Trust|jbcom/pkgs" README.md docs/ARCHITECTURE.mdRepository: jbcom/pkgs
Length of output: 205
🌐 Web query:
Homebrew Tap Trust unqualified brew install tap trusted same-named core formula behavior
💡 Result:
In Homebrew 6.0.0 and later, Homebrew requires explicit trust for third-party taps because they can contain arbitrary, unsandboxed Ruby code [1]. This trust model impacts how Homebrew resolves formulae when a name collides with one in homebrew/core. When you attempt to install a formula using its short name (e.g., brew install formula) and a same-named formula exists in both an untrusted tap and homebrew/core, Homebrew prioritizes the official core formula and does not load the untrusted tap [2][1]. Because the untrusted tap is not loaded, it is effectively ignored for unqualified installs [2][3]. To install a specific version of a formula from an untrusted tap when a name collision occurs, you must use the fully qualified name [2]: brew install user/repository/formula Using the fully qualified name implicitly trusts that specific item for that installation [2][4]. Alternatively, you can explicitly grant trust to the item or the entire tap before installation using the brew trust command [2][5]: brew trust --formula user/repository/formula # or brew trust user/repository Once a specific formula or tap is trusted, Homebrew will include it when evaluating formulae, and you may then be able to use the short name depending on Homebrew's internal resolution order, although using the fully qualified name remains the standard way to ensure you are referencing the specific tap-provided formula [2][6]. If you find that an untrusted tap is preventing you from accessing a formula, it is because Homebrew refuses to evaluate code from untrusted repositories to mitigate security risks [2][1].
Citations:
- 1: https://brew.sh/2026/06/11/homebrew-6.0.0/
- 2: https://docs.brew.sh/Tap-Trust
- 3: https://perrotta.dev/2026/06/brew-trust/
- 4: Trust qualified tap items before install Homebrew/brew#22621
- 5: Add tap trust commands Homebrew/brew#22472
- 6: brew install not respecting tap when formula name collides with core Homebrew/brew#16213
🏁 Script executed:
#!/bin/bash
set -euo pipefail
printf '\n== Nearby README context ==\n'
nl -ba README.md | sed -n '1,80p'
printf '\n== Nearby docs/ARCHITECTURE context ==\n'
nl -ba docs/ARCHITECTURE.md | sed -n '1,120p'
printf '\n== Cask/formula mentions ==\n'
rg -n "\bcask\b|formula|brew install --cask|brew install <|brew tap" .Repository: jbcom/pkgs
Length of output: 217
🏁 Script executed:
#!/bin/bash
set -euo pipefail
printf '\n== README.md ==\n'
sed -n '1,40p' README.md | cat -n
printf '\n== docs/ARCHITECTURE.md ==\n'
sed -n '1,80p' docs/ARCHITECTURE.md | cat -n
printf '\n== Relevant mentions ==\n'
grep -nE 'brew tap|brew install|cask|formula|jbcom/pkgs' README.md docs/ARCHITECTURE.mdRepository: jbcom/pkgs
Length of output: 6135
🌐 Web query:
docs.brew.sh Tap-Trust brew install unqualified formula from tapped repository trusted untrusted short name behavior
💡 Result:
In Homebrew, tap trust is a security feature that restricts Homebrew from loading code from non-official (third-party) taps unless they have been explicitly trusted [1]. When tap trust is required—which is the default behavior—you cannot install a formula from a third-party tap using its short name (e.g., brew install formula) if the tap is untrusted [1][2]. If you attempt to do so, Homebrew will refuse to load the formula [1][2]. To successfully install a formula from a third-party tap, you have the following options: 1. Trust the specific item: You can grant trust to only the required formula by running the command: brew trust --formula user/repository/formula [1] Once the specific formula is trusted, you can install it using its short name [1]. 2. Trust the entire tap: You can grant trust to all formulae, casks, and commands within a specific tap by running: brew trust user/repository [1] This allows Homebrew to load any current or future item from that tap, which is recommended for taps you administer or use extensively [1]. 3. Use a fully qualified name: Installing a formula using its fully qualified name (e.g., brew install user/repository/formula) acts as an implicit trust for that specific item [1][3]. Homebrew will communicate this implicit trust to you during the installation [3]. The requirement for tap trust is enforced to prevent unexpected code execution from untrusted third-party repositories [1][2]. You can check your current configuration or opt out of this requirement using the HOMEBREW_NO_REQUIRE_TAP_TRUST environment variable, though this is not recommended [1][4]. Official Homebrew taps are trusted by default [1][4].
Citations:
- 1: https://docs.brew.sh/Tap-Trust
- 2: brew install twice works without trusting dependencies Homebrew/brew#22618
- 3: Trust qualified tap items before install Homebrew/brew#22621
- 4: Add tap trust commands Homebrew/brew#22472
Use fully qualified Homebrew names here.
brew install <package> can fail on a third-party tap and may resolve to a core formula. Use brew install jbcom/pkgs/<formula> and brew install --cask jbcom/pkgs/<cask> instead in both examples.
README.md#L14-L15docs/ARCHITECTURE.md#L21-L23
📍 Affects 2 files
README.md#L14-L15(this comment)docs/ARCHITECTURE.md#L21-L23
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@README.md` around lines 14 - 15, Update the Homebrew installation examples in
README.md lines 14-15 and docs/ARCHITECTURE.md lines 21-23 to use fully
qualified tap names: use jbcom/pkgs/<formula> for formula installs and
jbcom/pkgs/<cask> with --cask for cask installs in both locations.
1 participant
The separate
jbcom/homebrew-tapmirror and emptyjbcom/scoop-bucketare being retired (preserved on the internal Gitea). All install docs now use the explicit-URL tap form:brew tap jbcom/pkgs https://github.com/jbcom/pkgs.🤖 Generated with Claude Code
Summary by CodeRabbit
Formula/andCasks/directories.