pkg.sopackage field notes

brew / rank 1120

Install create-dmg with Homebrew

Shell script to build fancy DMGs. Version 1.3.0 via Homebrew; verified 2026-07-02.

install

Additional install commands

macOS

Homebrewverified · 100%
brew install create-dmg

provider-native install command

overview

Package summary

Shell script to build fancy DMGs

Commands and aliases

  • create-dmg

history

Project history and usage

create-dmg is a macOS command-line packaging helper for producing polished disk images from a source folder. It wraps standard macOS disk-image tooling with options for Finder window layout, icons, background images, Applications drop links, encryption, signing, and notarization.

Project history

The project README credits Andrey Tarantsov as the original creator and says Andrew Janke helped substantially with the project in May 2020. The project is maintained as a shell script in a public GitHub repository under the create-dmg organization.

Adoption history

The README documents Homebrew installation as the first installation path, followed by release downloads and cloning the repository. That distribution style made create-dmg convenient for macOS developers who wanted repeatable DMG creation in release scripts without maintaining their own AppleScript and hdiutil wrappers.

How it is used

The normal workflow is to run create-dmg with an output .dmg name and a source folder, then pass options for volume name, icon placement, background art, filesystem format, encryption, codesigning, notarization, and related macOS packaging details.

Why package nerds care

For package maintainers, create-dmg matters because DMG layout is a macOS distribution detail that is easy to get wrong and awkward to reproduce. The tool packages common release-engineering conventions into one script that Homebrew, MacPorts, and Nix can expose as a small CLI dependency.

Timeline

  • Original project: Created by Andrey Tarantsov
  • 2020-05: README notes substantial help from Andrew Janke
  • README: Documents Homebrew installation and release-download installation

Related projects

  • The README lists node-appdmg and dmgbuild as alternatives for building macOS disk images.

security posture

Risk level: yellow

generalized runtime or code generation signal.

Risk classifier

yellow risk · medium confidence · runtime

Why

  • generalized runtime or code generation signal

Signals

  • text:shell

Install behavior

  • No Homebrew bottle metadata was recorded.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

CommandKindExposureNote
create-dmgexecutableindexed executableDiscovered from the local executable index.

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-08-03
manager version1.3.0
manager updated2026-07-02
local dataunknown
upstreamnot available
latest detectednot detected
  • okNo freshness warnings were generated.

install metadata

Package metadata

Package keybrew:create-dmg
Version1.3.0
Package managerHomebrew
Homepagehttps://github.com/create-dmg/create-dmg
Repositoryhttps://github.com/create-dmg/create-dmg
Last updated2026-07-02T12:12:51Z
Pulseupdated
Bottlenot recorded
Servicenone declared

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • Nucleus package database
  • curated package history
  • pkgdb category and tag curation