Post #1493213

Correct, that’s what I meant by calling it a lightweight sandbox that’s mainly used to isolate dependencies. Though the cool thing about cold brew is that it’s simply a shell script. Not even a crazy long one at that. It would not be difficult to modify the bubblewrap flags to increase security. Though filesystem isolation is not its goal, it’s meant to emulate that homebrew use which is unsandboxed.