The Workbrew Catalog now supports npm packages and VS Code extensions

The Workbrew Catalog expands as part of Workbrew 2.0.

Workbrew was born out of a need to bring governance and security to unmanaged Homebrew installations without slowing developers down. The response to our approach has been overwhelmingly positive, and customers have been eager to extend Workbrew's visibility and security beyond Homebrew to other sources of software, including additional package managers, direct downloads, and code editor extensions.

Workbrew 1.11 introduced the Workbrew Catalog, which laid the groundwork for additional package managers beyond Homebrew. Workbrew 2.0 expands the Workbrew Catalog to support millions of software packages across Homebrew, npm, and VS Code extensions. npm package support adds visibility into the enormous JavaScript ecosystem backing Node.js. VS Code extension support brings visibility to Visual Studio Code and other popular editors that use its extension API, such as Cursor, Windsurf, and Google Antigravity.

Npm packages and VS Code extensions show up in the same inventory as your Homebrew packages, matched against the Workbrew Catalog with known vulnerabilities flagged. On our more advanced plans, Workbrew can take over managing the software it discovers, with automatic patching and policy-based remediation.

You can explore the Workbrew Catalog without an account and use Workbrew's free Team plan to gain even more visibility in your own fleet.

Read more about the Workbrew 2.0 announcement and review the detailed release notes.