Update Homebrew installation instructions in README

[lenzai]

Removed the --no-quarantine flag from the Homebrew install command and replace with the xattr command's purpose.

Summary

Type of change

• Bug fix (fix)
• New feature (feat)
• Refactor / performance (refactor / perf)
• Documentation (docs)
• Tests (test)
• Build / CI (build / ci)
• Other:

Checklist

• Code follows the project style (TypeScript strict, ESLint, Prettier)
• Commit messages follow Conventional Commits (feat:, fix:, etc.)
• Self-review completed — no debug logs, no commented-out code
• Tests added or updated for the changed behaviour
• npm run test passes locally
• npm run lint passes locally
• UI changes tested on both macOS and Windows (or noted as platform-specific)
• New user-facing strings added to i18n files (en + zh)

Testing

Screenshots / recordings (if applicable)

[github-actions]

Review mode: initial

Findings

No issues found. The PR correctly replaces the --no-quarantine flag with an explicit xattr command, which achieves the same end result—bypassing macOS Gatekeeper—without relying on the Homebrew cask flag. The updated command and explanatory note are accurate.

Residual risks

• The xattr command assumes the Homebrew cask installs to /Applications/Open Cowork.app. Users with a custom --appdir would need to adjust the path. This is unlikely for the typical user.
• Removing the quarantine attribute may require sudo if the user does not have write permissions to /Applications; the command does not include sudo, but the user can prepend it if needed.

Testing
Not applicable (documentation change). No tests needed.

Open Cowork Bot