macOS Maintenance

System health checks, security auditing, and periodic maintenance for macOS. Keeps your Mac healthy, secure, and performant — the diagnostic counterpart to @tank/macos-cleanup (which handles disk space recovery).

Core Philosophy

1. Diagnose before fixing. Run the checkup script first. Understand the state of the system before changing anything.
2. Scored health reports. Every check is PASS/WARN/FAIL. Users see a clear scorecard, not a wall of terminal output.
3. Security by default. SIP, Gatekeeper, FileVault, and firewall should all be enabled. Flag anything that's off.
4. Non-destructive. Diagnostics are read-only. Maintenance actions (flush DNS, rebuild Spotlight, run periodic scripts) are safe and idempotent — running them extra times causes no harm.
5. Know when to restart. Many issues resolve with a restart. Check uptime and recommend restart when >30 days.