Comment by HughParry

side note but what is the consensus on figuring out whether small brew packages like this one are malicious?

I'm sure this one probably isn't, but I have no clue how I would know whether it is without reviewing the source code myself (or pointing an agent at it etc)