scrapy
Install command:
brew install scrapyWeb crawling & scraping framework
License: BSD-3-Clause
Development: Pull requests
Formula JSON API: /api/formula/scrapy.json
Formula code: scrapy.rb on GitHub
Bottle (binary package) installation support provided for:
| macOS on Apple Silicon |
golden gate | ✅ |
|---|---|---|
| tahoe | ✅ | |
| sequoia | ✅ | |
| Linux | ARM64 | ✅ |
| x86_64 | ✅ |
Current versions:
| stable | ✅ | 2.19.0 |
| head | ⚡️ | HEAD |
Revision: 1
Depends on:
| certifi | 2026.10.19 | Mozilla CA bundle for Python |
| cryptography | 50.0.2 | Cryptographic recipes and primitives for Python |
| python@3.15 | 3.15.0 | Interpreted, interactive, object-oriented programming language |
Uses from macOS: libxml2 (since macOS Ventura), libxslt
Binaries:
scrapy
Known vulnerabilities in the current version:
| CVE-2017-14158 (high) | |
| GHSA-8pqf-f4m5-798g (medium) | Twisted: IMAP wildcardToRegexp() ReDoS |
| GHSA-494j-54xm-rwp3 | AIOHTTP: Secure attribute not enforced for shared cookie |
| GHSA-5wr8-gcqf-gqf3 | aiohttp server lacks an initial request/header timeout |
| GHSA-6cjc-53gc-5rqm | AIOHTTP: Connector pool exhaustion via Max-Age overflow |
| GHSA-9xw5-w5jj-pvcg | AIOHTTP: File descriptor exhaustion in multipart requests |
| GHSA-f9xw-jh8m-3mwq | AIOHTTP: Absolute-form request targets can spoof Request.scheme |
| GHSA-gx76-c99x-2c96 | AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookies |
| GHSA-pqxq-w44r-73xw | AIOHTTP: Pure-Python parser request smuggling |
| GHSA-2g87-pp6c-29x5 | aiohttp: Multiple instances of excessive or unbounded memory/CPU use |
Data from Homebrew/advisory-database. Run brew vulns scrapy for a live check.
Analytics:
| 30 days | 90 days | 365 days | |
|---|---|---|---|
| Installs | 108 | 248 | 2,091 |
Installs (--HEAD) | 0 | 1 | 5 |
| Installs on Request | 108 | 247 | 2,091 |
Installs on Request (--HEAD) | 0 | 1 | 5 |
| Build Errors | 0 |