I'm also annoyed by the Tahoe update notifications. I understand the concern about installation scripts that fetch from external sources β that can be harmful, even if the repo owner or article author is trustworthy. There's always a risk of hijacking.
I analyzed the GitHub repo. The main files are three short shell scripts, and I confirmed:
1. No network calls β doesn't download anything from external sources
2. No background services β no LaunchAgents or daemons installed
3. No data exfiltration β doesn't send data anywhere
4. Reversible β provides an uninstall script
5. Transparent β all code is plain bash scripts and XML
6. Uses official Apple APIs β only uses the /usr/bin/profiles system command
7. Standard security practices β includes CI validation, shellcheck linting, and SHA256 checksums
Folks who are tired of the update notifications can use this with confidence.
Thank you, HN user with 66 karma registered 14 days ago.
Thank you for your service.