Automatic
macCurrent can verify the update path and complete it directly or invoke a trusted updater.
Source coverage
The update source decides the safe action.
macCurrent does not treat every download URL as interchangeable. It identifies who owns each update, checks the trust evidence that source provides, and either completes the update or hands control to the right trusted tool.
Coverage, not a vanity count
One useful source is a source macCurrent can act on safely.
Some products count every package registry, developer tool, or release website as a separate source. macCurrent focuses on installed Mac apps and Homebrew-managed tools. The goal is not the biggest number; it is a defensible answer to three questions: is an update actually available for this Mac, who published it, and who should install it?
Action classes
Four outcomes, stated before anything changes.
Trusted handoff
macCurrent detects the update, then opens the store, vendor tool, or app that owns installation.
Manual guidance
macCurrent identifies the likely source and explains the safest next step without guessing.
Excluded
System-managed components stay outside the app-update workflow and are labeled separately.
Recognized families
The source map macCurrent uses today.
Availability and action can vary by app because the installed artifact—not its display name—determines ownership.
Mac App Store
Reads the installed receipt and the Mac App Store's update state. Apple owns signing, delivery, and installation.
Sparkle
Reads the appcast and requires signed update metadata before macCurrent trusts a direct archive.
Homebrew casks and formulae
Matches the exact installed cask or formula, then keeps Homebrew in control of its own upgrade path.
Microsoft, Google, Adobe, Edge, and Docker
Detects vendor-owned helpers and routes each app family through the updater that understands its shared components.
Electron and Mozilla
Uses HTTPS version metadata and artifact trust when it is defensible; otherwise macCurrent keeps the action manual.
Tauri
Recognizes signed Tauri updater metadata, compares versions, and opens the app so its embedded key verifies installation.
Reviewed direct downloads
Requires HTTPS, the expected bundle identity, a trusted signing team, and forward version movement before replacement.
macOS Software Update
Apple's Software Update remains the availability authority. SOFA adds Apple security-advisory and CVE context to that offer.
Custom and unknown updaters
When ownership or download trust is ambiguous, macCurrent shows the evidence it has and does not silently replace the app.
How the trust boundary changes by source
No single verification rule fits every updater. macCurrent preserves the source's native trust boundary instead of flattening all updates into direct downloads.
| Source | Detection evidence | macCurrent action | Final authority |
|---|---|---|---|
| App Store | Store receipt and on-device update listing | Show availability and open the correct store path | Apple |
| Sparkle | Appcast, version, archive signature, and embedded public key | Verify, back up, and install when the signature chain is complete | The app publisher's signing key |
| Homebrew | Installed token, bundle match, and current cask or formula metadata | Invoke the matching Homebrew upgrade | Homebrew plus macOS code-signing checks |
| Vendor updater | Vendor helper, ticket, product code, or updater state | Invoke or open that updater | The vendor's signed update system |
| Tauri | Updater endpoint and signed release metadata | Compare the release, then open the app | The key embedded in the Tauri app |
| Direct download | Reviewed HTTPS URL, expected bundle ID, signing team, and version | Back up, validate, and replace only when every check passes | macCurrent's replacement checks and macOS Gatekeeper |
| macOS | Apple's on-device softwareupdate offer |
Show the update with SOFA security context and open Software Update | Apple Software Update |
Transparent by design
See the source before you choose the action.
macCurrent shows the detected channel, installed identity, available version, and safest next step in one reviewable list.