install

Additional install commands

macOS

Homebrew Caskverified · 100%

brew install --cask suspicious-package

local Homebrew cask metadata

overview

Package summary

Application for inspecting installer packages

Project links

Commands and aliases

spkg

security posture

No protected-tool coverage found yet

No matching local secret-handling manifest was found for suspicious-package. Package metadata is still published here so future coverage has a stable package URL.

Install behavior

No Homebrew post-install hook is recorded in formula metadata.
No Homebrew bottle metadata was recorded.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

Command	Kind	Exposure	Note
`spkg`	binary	Homebrew cask binary	spkg

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-08-04

manager version4.6.2,1311.4

manager updated

local dataok

upstreamnot checked

latest detectednot detected

https://www.mothersruin.com/software/SuspiciousPackage/

infoNo package-manager update timestamp was available.low confidence
infoRelease/tag comparison is only available for GitHub repositories.https://www.mothersruin.com/software/SuspiciousPackage/none confidence

install metadata

Package metadata

Package key	cask:suspicious-package
Version	4.6.2,1311.4
Package manager	Homebrew Cask
Package manager page	https://formulae.brew.sh/cask/suspicious-package
Homepage	https://www.mothersruin.com/software/SuspiciousPackage/
Upstream docs	https://www.mothersruin.com/software/SuspiciousPackage/
Source archive	https://www.mothersruin.com/software/downloads/SuspiciousPackage.dmg
SHA-256	no_check
Bottle	not recorded
Homebrew post-install	not defined
Service	none declared

registry facts

Source database details

Source Database	Homebrew cask API
Tap	homebrew/cask
Full Token	suspicious-package
Names	Suspicious Package
Artifacts	App 1 Binary 1 Target 2 Zap 1
Deprecated	no
Disabled	no

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

cross-ecosystem install command graph
package relationship graph
package version freshness
package-page enrichment

Install suspicious-package with Homebrew Cask