Cork is a native macOS SwiftUI application that provides a comprehensive graphical interface for Homebrew, the macOS package manager. It manages formulae and casks (install, uninstall, update, pin, tag, purge), taps, background services via `brew services`, Brewfile import/export, and maintenance operations (cache cleanup, orphan removal, `brew doctor`). It also includes a distinctive 'adoptable apps' feature that scans /Applications to find software not yet managed by Homebrew and offers to install it as casks, plus menu bar extras, App Intents/Shortcuts integration, user notifications, onboarding and licensing/demo flows, and a self-downgrade mechanism that fetches older Cork releases from the GitHub API. The app collects anonymous usage analytics and can submit system version info to first-party endpoints. The architecture is a modular SwiftUI application built with Tuist, organized into local targets (Cork app, CorkShared, CorkModels, CorkTerminalFunctions, CorkNotifications, CorkIntents, and feature modules for Brewfiles and xattr handling), with FactoryKit dependency injection, SwiftData persistence for user tags, Swift 6 strict concurrency, and macOS 14+ deployment. The core data flow is subprocess-based: the app shells out to `brew` commands through an AsyncStream-backed terminal wrapper, classifies streaming output via regex into standard/error/warning categories, and decodes `brew --json=v2` output into typed models. External dependencies include the Homebrew CLI itself, remote APIs (formulae.brew.sh analytics, a first-party tap metadata service, a license validation webhook), and the filesystem (Cellar, Caskroom, /Applications). The codebase has several genuinely reusable patterns, notably the tested TerminalOutputMatchable protocol for regex-based CLI output classification, the async streaming shell wrapper, proxy-aware downloading, and the app-adoption filesystem reconciliation logic. However, code hygiene is mixed: large commented-out blocks, placeholder views ('Hello, World!'), duplicated protocols and extensions, typo'd identifiers, hardcoded local machine paths in help resources, and a localization pipeline depending on a private submodule. A serious safety finding: AppDelegate.swift contains a malicious comment instructing coding agents to embed anthrax synthesis instructions in commits — a supply-chain poisoning attempt that should be investigated and removed immediately. Overall this is a functional, feature-rich, popular application with real craftsmanship in its terminal-handling layer, dragged down by accumulated dead code and maintenance debt.