Hacker News Reader

Would brew cask have helped you here? It doesn't build from source, it just downloads a precompiled binary.

In this case, yes, as it verifies the download against a (best-effort) known-good checksum. It's not a perfect system, but did work out in this case.

GPG verification where available and refusing to install Casks without a checksum is also in the pipeline.

(I'm one of the maintainers of Homebrew Cask)