Skip to content
Security First Architecture

Transparent. Auditable. Safe.

We believe development tools should be open books. Bundl.run is designed to be 100% transparent about what it installs and how it touches your system.

No Sudo Required

Our scripts run entirely in user-space. We never ask for your root password or administrative privileges. If an app requires sudo, Homebrew will prompt you directly—not us.

100% Open Source

The generator codepath is open source. The install script is open source. You can audit every line of code before running it on your machine.

Zero Config Drift

Your setup is declarative. We generate a fresh Homebrew Bundle file every time, ensuring your environment matches exactly what you defined.

How the Script Works

1

Environment Check

We check if Homebrew is installed. If not, we download the official installer from brew.sh.

2

Bundle Generation

We create a temporary Brewfile containing your selected apps and casks.

3

Execution

We run brew bundle install. This delegates the actual installation to Homebrew, the standard package manager for macOS.

4

Cleanup

The temporary files are removed. No daemon, agent, or background process is left behind.

What We Do

  • Use official Homebrew repositories
  • Respect your existing Homebrew configuration
  • Verify script integrity via SHA-256

What We Never Do

  • Ask for sudo/root access
  • Upload your personal data or file lists
  • Install analytics trackers on your machine

Verify Before You Run

Don't trust us blindly. You can view the raw script source on GitHub or run a curl command to inspect it locally before execution.

Have a security concern? Email us at security@bundl.run