Is there a constructive way to ask that certain Casks, like Dropbox, be moved to a versioned model?

For example, Dropbox, has support for versions and SHAs? I think we can agree that a SHA in each Cask makes the ecosystem more secure. I know that Dropbox’s URLs are pretty reliable and secure, but would the community be open to changing to an enforced SHA if there was a method in place for this to be automated on a per-cask basis? I would greatly appreciate any feedback.

Thanks!

The way to request changes in homebrew is through pull requests. You just make the change you want to see and discuss it in the pull request.

1 Like