{"id":13016,"date":"2021-04-13T08:59:26","date_gmt":"2021-04-13T13:59:26","guid":{"rendered":"https:\/\/rud.is\/b\/?p=13016"},"modified":"2021-04-13T08:59:26","modified_gmt":"2021-04-13T13:59:26","slug":"quick-hit-processing-macos-application-metadata-weirdly-fast-with-mdls-and-r","status":"publish","type":"post","link":"https:\/\/rud.is\/b\/2021\/04\/13\/quick-hit-processing-macos-application-metadata-weirdly-fast-with-mdls-and-r\/","title":{"rendered":"Quick Hit: Processing macOS Application Metadata Weirdly Fast with mdls and R"},"content":{"rendered":"

(reminder: Quick Hits have minimal explanatory blathering, but I can elaborate on anything if folks submit a comment).<\/p>\n

I’m playing around with Screen Time on xOS again and noticed mdls<\/code> (macOS command line utility for getting file metadata) has a -plist<\/code> option (it probably has for a while & I just never noticed it). I further noticed there’s a kMDItemExecutableArchitectures<\/code> key (which, too, may have been “a thing” before as well). Having application metadata handy for the utility functions I’m putting together for Rmd-based Screen Time reports would be handy, so I threw together some quick code to show how to work with it in R.<\/p>\n

Running mdls -plist \/some\/file.plist ...path-to-apps...<\/code> will generate a giant property list file with all metadata for all the apps specified. It’s a wicked fast<\/em> command even when grabbing and outputting metadata for all apps on a system.<\/p>\n

Each entry looks like this:<\/p>\n

<dict>\n    <key>_kMDItemDisplayNameWithExtensions<\/key>\n    <string>RStudio \u2014 tycho.app<\/string>\n    <key>kMDItemAlternateNames<\/key>\n    <array>\n      <string>RStudio \u2014 tycho.app<\/string>\n    <\/array>\n    <key>kMDItemCFBundleIdentifier<\/key>\n    <string>com.RStudio_\u2014_tycho<\/string>\n    <key>kMDItemContentCreationDate<\/key>\n    <date>2021-01-31T17:56:46Z<\/date>\n    <key>kMDItemContentCreationDate_Ranking<\/key>\n    <date>2021-01-31T00:00:00Z<\/date>\n    <key>kMDItemContentModificationDate<\/key>\n    <date>2021-01-31T17:56:46Z<\/date>\n    <key>kMDItemContentModificationDate_Ranking<\/key>\n    <date>2021-01-31T00:00:00Z<\/date>\n    <key>kMDItemContentType<\/key>\n    <string>com.apple.application-bundle<\/string>\n    <key>kMDItemContentTypeTree<\/key>\n    <array>\n      <string>com.apple.application-bundle<\/string>\n      <string>com.apple.application<\/string>\n      <string>public.executable<\/string>\n      <string>com.apple.localizable-name-bundle<\/string>\n      <string>com.apple.bundle<\/string>\n      <string>public.directory<\/string>\n      <string>public.item<\/string>\n      <string>com.apple.package<\/string>\n    <\/array>\n    <key>kMDItemCopyright<\/key>\n    <string>Copyright \u00a9 2017-2020 BZG Inc. All rights reserved.<\/string>\n    <key>kMDItemDateAdded<\/key>\n    <date>2021-04-09T18:29:52Z<\/date>\n    <key>kMDItemDateAdded_Ranking<\/key>\n    <date>2021-04-09T00:00:00Z<\/date>\n    <key>kMDItemDisplayName<\/key>\n    <string>RStudio \u2014 tycho.app<\/string>\n    <key>kMDItemDocumentIdentifier<\/key>\n    <integer>0<\/integer>\n    <key>kMDItemExecutableArchitectures<\/key>\n    <array>\n      <string>x86_64<\/string>\n    <\/array>\n    <key>kMDItemFSContentChangeDate<\/key>\n    <date>2021-01-31T17:56:46Z<\/date>\n    <key>kMDItemFSCreationDate<\/key>\n    <date>2021-01-31T17:56:46Z<\/date>\n    <key>kMDItemFSCreatorCode<\/key>\n    <integer>0<\/integer>\n    <key>kMDItemFSFinderFlags<\/key>\n    <integer>0<\/integer>\n    <key>kMDItemFSInvisible<\/key>\n    <false\/>\n    <key>kMDItemFSIsExtensionHidden<\/key>\n    <true\/>\n    <key>kMDItemFSLabel<\/key>\n    <integer>0<\/integer>\n    <key>kMDItemFSName<\/key>\n    <string>RStudio \u2014 tycho.app<\/string>\n    <key>kMDItemFSNodeCount<\/key>\n    <integer>1<\/integer>\n    <key>kMDItemFSOwnerGroupID<\/key>\n    <integer>20<\/integer>\n    <key>kMDItemFSOwnerUserID<\/key>\n    <integer>501<\/integer>\n    <key>kMDItemFSSize<\/key>\n    <integer>37451395<\/integer>\n    <key>kMDItemFSTypeCode<\/key>\n    <integer>0<\/integer>\n    <key>kMDItemInterestingDate_Ranking<\/key>\n    <date>2021-04-13T00:00:00Z<\/date>\n    <key>kMDItemKind<\/key>\n    <string>Application<\/string>\n    <key>kMDItemLastUsedDate<\/key>\n    <date>2021-04-13T12:47:12Z<\/date>\n    <key>kMDItemLastUsedDate_Ranking<\/key>\n    <date>2021-04-13T00:00:00Z<\/date>\n    <key>kMDItemLogicalSize<\/key>\n    <integer>37451395<\/integer>\n    <key>kMDItemPhysicalSize<\/key>\n    <integer>38092800<\/integer>\n    <key>kMDItemUseCount<\/key>\n    <integer>20<\/integer>\n    <key>kMDItemUsedDates<\/key>\n    <array>\n      <date>2021-03-15T04:00:00Z<\/date>\n      <date>2021-03-17T04:00:00Z<\/date>\n      <date>2021-03-18T04:00:00Z<\/date>\n      <date>2021-03-19T04:00:00Z<\/date>\n      <date>2021-03-22T04:00:00Z<\/date>\n      <date>2021-03-25T04:00:00Z<\/date>\n      <date>2021-03-30T04:00:00Z<\/date>\n      <date>2021-04-01T04:00:00Z<\/date>\n      <date>2021-04-03T04:00:00Z<\/date>\n      <date>2021-04-05T04:00:00Z<\/date>\n      <date>2021-04-07T04:00:00Z<\/date>\n      <date>2021-04-08T04:00:00Z<\/date>\n      <date>2021-04-12T04:00:00Z<\/date>\n      <date>2021-04-13T04:00:00Z<\/date>\n    <\/array>\n    <key>kMDItemVersion<\/key>\n    <string>4.0.1<\/string>\n  <\/dict>\n<\/code><\/pre>\n
We can get all the metadata for all installed apps in R via:<\/p>\n
library(sys)\nlibrary(xml2)\nlibrary(tidyverse)\n\n# get full paths to all the apps\nlist.files(\n  c(\"\/Applications\", \"\/System\/Library\/CoreServices\", \"\/Applications\/Utilities\", \"\/System\/Applications\"), \n  pattern = \"\\\\.app$\", \n  full.names = TRUE\n) -> apps\n\n# generate a giant property list with all the app attributres\ntf <- tempfile(fileext = \".plist\")\nsys::exec_internal(\"mdls\", c(\"-plist\", tf, apps))\n<\/code><\/pre>\n
Unfortunately, some companies \u2014 COUGH Logitech COUGH \u2014 stick illegal entities in some values, so we have to take care of those (I used xmllint<\/code> to see which one(s) were bad):<\/p>\n
# read it in and clean up CDATA error (Logitech has a bad value in one field)\nfil <- readr::read_file_raw(tf)\nfil[fil == as.raw(0x03)] <- charToRaw(\" \")\n<\/code><\/pre>\n
Now, we can read in the XML without errors:<\/p>\n
# now parse it and get the top of each app entry\napplist <- xml2::read_xml(fil)\n(applist <- xml_find_all(applist, \"\/\/array\/dict\"))\n## {xml_nodeset (196)}\n##  [1] <dict>\\n  <key>_kMDItemDisplayNameWithExtensions<\/key>\\n  <string>1Blocker (Old).app<\/string>\\n  <key>kMDItemAlternateNames<\/key>\\n ...\n##  [2] <dict>\\n  <key>_kMDItemDisplayNameWithExtensions<\/key>\\n  <string>1Password 7.app<\/string>\\n  <key>_kMDItemEngagementData<\/key>\\n   ...\n##  [3] <dict>\\n  <key>_kMDItemDisplayNameWithExtensions<\/key>\\n  <string>Adblock Plus.app<\/string>\\n  <key>kMDItemAlternateNames<\/key>\\n   ...\n##  [4] <dict>\\n  <key>_kMDItemDisplayNameWithExtensions<\/key>\\n  <string>AdBlock.app<\/string>\\n  <key>kMDItemAlternateNames<\/key>\\n  <arra ...\n##  [5] <dict>\\n  <key>_kMDItemDisplayNameWithExtensions<\/key>\\n  <string>AdGuard for Safari.app<\/string>\\n  <key>kMDItemAlternateNames<\/ke ...\n##  [6] <dict>\\n  <key>_kMDItemDisplayNameWithExtensions<\/key>\\n  <string>Agenda.app<\/string>\\n  <key>kMDItemAlternateNames<\/key>\\n  <array ...\n##  [7] <dict>\\n  <key>_kMDItemDisplayNameWithExtensions<\/key>\\n  <string>Alfred 4.app<\/string>\\n  <key>kMDItemAlternateNames<\/key>\\n  <arr ...\n##  [8] <dict>\\n  <key>_kMDItemDisplayNameWithExtensions<\/key>\\n  <string>Android File Transfer.app<\/string>\\n  <key>kMDItemAlternateNames< ...\n##  [9] <dict>\\n  <key>_kMDItemDisplayNameWithExtensions<\/key>\\n  <string>Asset Catalog Creator Pro.app<\/string>\\n  <key>kMDItemAlternateNa ...\n## [10] <dict>\\n  <key>_kMDItemDisplayNameWithExtensions<\/key>\\n  <string>Awsaml.app<\/string>\\n  <key>kMDItemAlternateNames<\/key>\\n  <array ...\n## [11] <dict>\\n  <key>_kMDItemDisplayNameWithExtensions<\/key>\\n  <string>Boop.app<\/string>\\n  <key>kMDItemAlternateNames<\/key>\\n  <array>\\ ...\n## [12] <dict>\\n  <key>_kMDItemDisplayNameWithExtensions<\/key>\\n  <string>Buffer.app<\/string>\\n  <key>kMDItemAlternateNames<\/key>\\n  <array ...\n## [13] <dict>\\n  <key>_kMDItemDisplayNameWithExtensions<\/key>\\n  <string>Burp Suite Community Edition.app<\/string>\\n  <key>kMDItemAlternat ...\n## [14] <dict>\\n  <key>_kMDItemDisplayNameWithExtensions<\/key>\\n  <string>Camera Settings.app<\/string>\\n  <key>kMDItemAlternateNames<\/key>\\ ...\n## [15] <dict>\\n  <key>_kMDItemDisplayNameWithExtensions<\/key>\\n  <string>Cisco Webex Meetings.app<\/string>\\n  <key>kMDItemAlternateNames<\/ ...\n## [16] <dict>\\n  <key>_kMDItemDisplayNameWithExtensions<\/key>\\n  <string>Claquette.app<\/string>\\n  <key>kMDItemAlternateNames<\/key>\\n  <ar ...\n## [17] <dict>\\n  <key>_kMDItemDisplayNameWithExtensions<\/key>\\n  <string>Discord.app<\/string>\\n  <key>kMDItemAlternateNames<\/key>\\n  <arra ...\n## [18] <dict>\\n  <key>_kMDItemDisplayNameWithExtensions<\/key>\\n  <string>Elgato Control Center.app<\/string>\\n  <key>kMDItemAlternateNames< ...\n## [19] <dict>\\n  <key>_kMDItemDisplayNameWithExtensions<\/key>\\n  <string>F5 Weather.app<\/string>\\n  <key>kMDItemAlternateNames<\/key>\\n  <a ...\n## [20] <dict>\\n  <key>_kMDItemDisplayNameWithExtensions<\/key>\\n  <string>Fantastical.app<\/string>\\n  <key>kMDItemAlternateNames<\/key>\\n  < ...\n## ...\n<\/code><\/pre>\n
I really dislike property lists as I’m not a fan of position-dependent records in XML files. To get values for keys, we have to find the key, then go to the next sibling, figure out its type, and handle it accordingly. This is a verbose enough process to warrant creating a small helper function:<\/p>\n
# helper function to retrieve the values for a given key\nkval <- function(doc, key) {\n\n  val <- xml_find_first(doc, sprintf(\".\/\/key[contains(., '%s')]\/following-sibling::*\", key))\n\n  switch(\n    unique(na.omit(xml_name(val))),\n    \"array\" = as_list(val) |> map(unlist, use.names = FALSE) |> map(unique),\n    \"integer\" = xml_integer(val),\n    \"true\" = TRUE,\n    \"false\" = FALSE,\n    \"string\" = xml_text(val, trim = TRUE)\n  )\n\n}\n<\/code><\/pre>\n
This is nowhere near as robust as XML::readKeyValueDB()<\/code> but it doesn’t have to be for this particular use case.<\/p>\n
We can build up a data frame with certain fields (I wanted to know how many apps still aren’t Universal):<\/p>\n
tibble(\n  category = kval(applist, \"kMDItemAppStoreCategory\"),\n  bundle_id = kval(applist, \"kMDItemCFBundleIdentifier\"),\n  display_name = kval(applist, \"kMDItemDisplayName\"),\n  arch = kval(applist, \"kMDItemExecutableArchitectures\"),\n) |> \n  print() -> app_info\n## # A tibble: 196 x 4\n##    category        bundle_id                            display_name                  arch     \n##    <chr>           <chr>                                <chr>                         <list>   \n##  1 Productivity    com.khanov.BlockerMac                1Blocker (Old).app            <chr [2]>\n##  2 Productivity    com.agilebits.onepassword7           1Password 7.app               <chr [2]>\n##  3 Productivity    org.adblockplus.adblockplussafarimac Adblock Plus.app              <chr [2]>\n##  4 Productivity    com.betafish.adblock-mac             AdBlock.app                   <chr [1]>\n##  5 Utilities       com.adguard.safari.AdGuard           AdGuard for Safari.app        <chr [1]>\n##  6 Productivity    com.momenta.agenda.macos             Agenda.app                    <chr [2]>\n##  7 Productivity    com.runningwithcrayons.Alfred        Alfred 4.app                  <chr [2]>\n##  8 NA              com.google.android.mtpviewer         Android File Transfer.app     <chr [1]>\n##  9 Developer Tools com.bridgetech.asset-catalog         Asset Catalog Creator Pro.app <chr [2]>\n## 10 Developer Tools com.rapid7.awsaml                    Awsaml.app                    <chr [1]>\n## # \u2026 with 186 more rows\n<\/code><\/pre>\n
Finally, we can expand the arch<\/code> column and see how many apps support Apple Silicon:<\/p>\n
app_info |> \n  unnest(arch) |> \n  spread(arch, arch) |> \n  mutate_at(\n    vars(arm64, x86_64),\n    ~!is.na(.x)\n  ) |> \n  count(arm64)\n## # A tibble: 2 x 2\n##   arm64     n\n##   <lgl> <int>\n## 1 FALSE    33\n## 2 TRUE    163\n<\/code><\/pre>\n
Alas, there are still some stragglers stuck in Rosetta 2.<\/p>\n
FIN<\/h3>\n
Drop comments if anything requires more blathering and have some fun with your macOS filesystem!<\/p>\n","protected":false},"excerpt":{"rendered":"
(reminder: Quick Hits have minimal explanatory blathering, but I can elaborate on anything if folks submit a comment). I’m playing around with Screen Time on xOS again and noticed mdls (macOS command line utility for getting file metadata) has a -plist option (it probably has for a while & I just never noticed it). I […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"activitypub_content_warning":"","activitypub_content_visibility":"","activitypub_max_image_attachments":3,"activitypub_interaction_policy_quote":"anyone","activitypub_status":"","footnotes":""},"categories":[780,91],"tags":[],"class_list":["post-13016","post","type-post","status-publish","format-standard","hentry","category-macos","category-r"],"yoast_head":"\nQuick Hit: Processing macOS Application Metadata Weirdly Fast with mdls and R - rud.is<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/rud.is\/b\/2021\/04\/13\/quick-hit-processing-macos-application-metadata-weirdly-fast-with-mdls-and-r\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Quick Hit: Processing macOS Application Metadata Weirdly Fast with mdls and R - rud.is\" \/>\n<meta property=\"og:description\" content=\"(reminder: Quick Hits have minimal explanatory blathering, but I can elaborate on anything if folks submit a comment). I’m playing around with Screen Time on xOS again and noticed mdls (macOS command line utility for getting file metadata) has a -plist option (it probably has for a while & I just never noticed it). I […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/rud.is\/b\/2021\/04\/13\/quick-hit-processing-macos-application-metadata-weirdly-fast-with-mdls-and-r\/\" \/>\n<meta property=\"og:site_name\" content=\"rud.is\" \/>\n<meta property=\"article:published_time\" content=\"2021-04-13T13:59:26+00:00\" \/>\n<meta name=\"author\" content=\"hrbrmstr\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"hrbrmstr\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"10 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/rud.is\\\/b\\\/2021\\\/04\\\/13\\\/quick-hit-processing-macos-application-metadata-weirdly-fast-with-mdls-and-r\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/rud.is\\\/b\\\/2021\\\/04\\\/13\\\/quick-hit-processing-macos-application-metadata-weirdly-fast-with-mdls-and-r\\\/\"},\"author\":{\"name\":\"hrbrmstr\",\"@id\":\"https:\\\/\\\/rud.is\\\/b\\\/#\\\/schema\\\/person\\\/d7cb7487ab0527447f7fda5c423ff886\"},\"headline\":\"Quick Hit: Processing macOS Application Metadata Weirdly Fast with mdls and R\",\"datePublished\":\"2021-04-13T13:59:26+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/rud.is\\\/b\\\/2021\\\/04\\\/13\\\/quick-hit-processing-macos-application-metadata-weirdly-fast-with-mdls-and-r\\\/\"},\"wordCount\":342,\"commentCount\":2,\"publisher\":{\"@id\":\"https:\\\/\\\/rud.is\\\/b\\\/#\\\/schema\\\/person\\\/d7cb7487ab0527447f7fda5c423ff886\"},\"articleSection\":[\"macOS\",\"R\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/rud.is\\\/b\\\/2021\\\/04\\\/13\\\/quick-hit-processing-macos-application-metadata-weirdly-fast-with-mdls-and-r\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/rud.is\\\/b\\\/2021\\\/04\\\/13\\\/quick-hit-processing-macos-application-metadata-weirdly-fast-with-mdls-and-r\\\/\",\"url\":\"https:\\\/\\\/rud.is\\\/b\\\/2021\\\/04\\\/13\\\/quick-hit-processing-macos-application-metadata-weirdly-fast-with-mdls-and-r\\\/\",\"name\":\"Quick Hit: Processing macOS Application Metadata Weirdly Fast with mdls and R - rud.is\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/rud.is\\\/b\\\/#website\"},\"datePublished\":\"2021-04-13T13:59:26+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/rud.is\\\/b\\\/2021\\\/04\\\/13\\\/quick-hit-processing-macos-application-metadata-weirdly-fast-with-mdls-and-r\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/rud.is\\\/b\\\/2021\\\/04\\\/13\\\/quick-hit-processing-macos-application-metadata-weirdly-fast-with-mdls-and-r\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/rud.is\\\/b\\\/2021\\\/04\\\/13\\\/quick-hit-processing-macos-application-metadata-weirdly-fast-with-mdls-and-r\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/rud.is\\\/b\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Quick Hit: Processing macOS Application Metadata Weirdly Fast with mdls and R\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/rud.is\\\/b\\\/#website\",\"url\":\"https:\\\/\\\/rud.is\\\/b\\\/\",\"name\":\"rud.is\",\"description\":\""In God we trust. All others must bring data"\",\"publisher\":{\"@id\":\"https:\\\/\\\/rud.is\\\/b\\\/#\\\/schema\\\/person\\\/d7cb7487ab0527447f7fda5c423ff886\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/rud.is\\\/b\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\\\/\\\/rud.is\\\/b\\\/#\\\/schema\\\/person\\\/d7cb7487ab0527447f7fda5c423ff886\",\"name\":\"hrbrmstr\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i0.wp.com\\\/rud.is\\\/b\\\/wp-content\\\/uploads\\\/2023\\\/10\\\/ukr-shield.png?fit=460%2C460&ssl=1\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/rud.is\\\/b\\\/wp-content\\\/uploads\\\/2023\\\/10\\\/ukr-shield.png?fit=460%2C460&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/rud.is\\\/b\\\/wp-content\\\/uploads\\\/2023\\\/10\\\/ukr-shield.png?fit=460%2C460&ssl=1\",\"width\":460,\"height\":460,\"caption\":\"hrbrmstr\"},\"logo\":{\"@id\":\"https:\\\/\\\/i0.wp.com\\\/rud.is\\\/b\\\/wp-content\\\/uploads\\\/2023\\\/10\\\/ukr-shield.png?fit=460%2C460&ssl=1\"},\"description\":\"Don't look at me\u2026I do what he does \u2014 just slower. #rstats avuncular \u2022 ?Resistance Fighter \u2022 Cook \u2022 Christian \u2022 [Master] Chef des Donn\u00e9es de S\u00e9curit\u00e9 @ @rapid7\",\"sameAs\":[\"http:\\\/\\\/rud.is\"],\"url\":\"https:\\\/\\\/rud.is\\\/b\\\/author\\\/hrbrmstr\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Quick Hit: Processing macOS Application Metadata Weirdly Fast with mdls and R - rud.is","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/rud.is\/b\/2021\/04\/13\/quick-hit-processing-macos-application-metadata-weirdly-fast-with-mdls-and-r\/","og_locale":"en_US","og_type":"article","og_title":"Quick Hit: Processing macOS Application Metadata Weirdly Fast with mdls and R - rud.is","og_description":"(reminder: Quick Hits have minimal explanatory blathering, but I can elaborate on anything if folks submit a comment). I’m playing around with Screen Time on xOS again and noticed mdls (macOS command line utility for getting file metadata) has a -plist option (it probably has for a while & I just never noticed it). I […]","og_url":"https:\/\/rud.is\/b\/2021\/04\/13\/quick-hit-processing-macos-application-metadata-weirdly-fast-with-mdls-and-r\/","og_site_name":"rud.is","article_published_time":"2021-04-13T13:59:26+00:00","author":"hrbrmstr","twitter_card":"summary_large_image","twitter_misc":{"Written by":"hrbrmstr","Est. reading time":"10 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/rud.is\/b\/2021\/04\/13\/quick-hit-processing-macos-application-metadata-weirdly-fast-with-mdls-and-r\/#article","isPartOf":{"@id":"https:\/\/rud.is\/b\/2021\/04\/13\/quick-hit-processing-macos-application-metadata-weirdly-fast-with-mdls-and-r\/"},"author":{"name":"hrbrmstr","@id":"https:\/\/rud.is\/b\/#\/schema\/person\/d7cb7487ab0527447f7fda5c423ff886"},"headline":"Quick Hit: Processing macOS Application Metadata Weirdly Fast with mdls and R","datePublished":"2021-04-13T13:59:26+00:00","mainEntityOfPage":{"@id":"https:\/\/rud.is\/b\/2021\/04\/13\/quick-hit-processing-macos-application-metadata-weirdly-fast-with-mdls-and-r\/"},"wordCount":342,"commentCount":2,"publisher":{"@id":"https:\/\/rud.is\/b\/#\/schema\/person\/d7cb7487ab0527447f7fda5c423ff886"},"articleSection":["macOS","R"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/rud.is\/b\/2021\/04\/13\/quick-hit-processing-macos-application-metadata-weirdly-fast-with-mdls-and-r\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/rud.is\/b\/2021\/04\/13\/quick-hit-processing-macos-application-metadata-weirdly-fast-with-mdls-and-r\/","url":"https:\/\/rud.is\/b\/2021\/04\/13\/quick-hit-processing-macos-application-metadata-weirdly-fast-with-mdls-and-r\/","name":"Quick Hit: Processing macOS Application Metadata Weirdly Fast with mdls and R - rud.is","isPartOf":{"@id":"https:\/\/rud.is\/b\/#website"},"datePublished":"2021-04-13T13:59:26+00:00","breadcrumb":{"@id":"https:\/\/rud.is\/b\/2021\/04\/13\/quick-hit-processing-macos-application-metadata-weirdly-fast-with-mdls-and-r\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/rud.is\/b\/2021\/04\/13\/quick-hit-processing-macos-application-metadata-weirdly-fast-with-mdls-and-r\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/rud.is\/b\/2021\/04\/13\/quick-hit-processing-macos-application-metadata-weirdly-fast-with-mdls-and-r\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/rud.is\/b\/"},{"@type":"ListItem","position":2,"name":"Quick Hit: Processing macOS Application Metadata Weirdly Fast with mdls and R"}]},{"@type":"WebSite","@id":"https:\/\/rud.is\/b\/#website","url":"https:\/\/rud.is\/b\/","name":"rud.is","description":""In God we trust. All others must bring data"","publisher":{"@id":"https:\/\/rud.is\/b\/#\/schema\/person\/d7cb7487ab0527447f7fda5c423ff886"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/rud.is\/b\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":["Person","Organization"],"@id":"https:\/\/rud.is\/b\/#\/schema\/person\/d7cb7487ab0527447f7fda5c423ff886","name":"hrbrmstr","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i0.wp.com\/rud.is\/b\/wp-content\/uploads\/2023\/10\/ukr-shield.png?fit=460%2C460&ssl=1","url":"https:\/\/i0.wp.com\/rud.is\/b\/wp-content\/uploads\/2023\/10\/ukr-shield.png?fit=460%2C460&ssl=1","contentUrl":"https:\/\/i0.wp.com\/rud.is\/b\/wp-content\/uploads\/2023\/10\/ukr-shield.png?fit=460%2C460&ssl=1","width":460,"height":460,"caption":"hrbrmstr"},"logo":{"@id":"https:\/\/i0.wp.com\/rud.is\/b\/wp-content\/uploads\/2023\/10\/ukr-shield.png?fit=460%2C460&ssl=1"},"description":"Don't look at me\u2026I do what he does \u2014 just slower. #rstats avuncular \u2022 ?Resistance Fighter \u2022 Cook \u2022 Christian \u2022 [Master] Chef des Donn\u00e9es de S\u00e9curit\u00e9 @ @rapid7","sameAs":["http:\/\/rud.is"],"url":"https:\/\/rud.is\/b\/author\/hrbrmstr\/"}]}},"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/p23idr-3nW","jetpack_likes_enabled":true,"jetpack-related-posts":[{"id":12940,"url":"https:\/\/rud.is\/b\/2021\/02\/07\/getting-a-handle-on-macos-app-entitlements-with-r\/","url_meta":{"origin":13016,"position":0},"title":"Getting a Handle on macOS App Entitlements with R","author":"hrbrmstr","date":"2021-02-07","format":false,"excerpt":"If you've been following me around the internets for a while you've likely heard me pontificate about the need to be aware of and reduce \u2014 when possible \u2014 your personal \"cyber\" attack surface. One of the ways you can do that is to install as few applications as possible\u2026","rel":"","context":"In "Information Security"","block_context":{"text":"Information Security","link":"https:\/\/rud.is\/b\/category\/information-security\/"},"img":{"alt_text":"macos app entitlements","src":"https:\/\/i0.wp.com\/rud.is\/b\/wp-content\/uploads\/2021\/02\/ent-grph-02.png?fit=1138%2C1200&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/rud.is\/b\/wp-content\/uploads\/2021\/02\/ent-grph-02.png?fit=1138%2C1200&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/rud.is\/b\/wp-content\/uploads\/2021\/02\/ent-grph-02.png?fit=1138%2C1200&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/rud.is\/b\/wp-content\/uploads\/2021\/02\/ent-grph-02.png?fit=1138%2C1200&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/rud.is\/b\/wp-content\/uploads\/2021\/02\/ent-grph-02.png?fit=1138%2C1200&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":10991,"url":"https:\/\/rud.is\/b\/2018\/07\/06\/visualizing-macos-app-usage\/","url_meta":{"origin":13016,"position":1},"title":"Visualizing macOS App Usage with a Little Help from osqueryr & mactheknife","author":"hrbrmstr","date":"2018-07-06","format":false,"excerpt":"Both my osqueryr and macthekinfe packages have had a few updates and I wanted to put together a fun example (it being Friday, and all) for what you can do with them. All my packages are now on GitHub and GitLab and I'll be maintaining them on both so I\u2026","rel":"","context":"In "R"","block_context":{"text":"R","link":"https:\/\/rud.is\/b\/category\/r\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/rud.is\/b\/wp-content\/uploads\/2018\/07\/app-lod-tree-1.png?fit=1200%2C1197&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/rud.is\/b\/wp-content\/uploads\/2018\/07\/app-lod-tree-1.png?fit=1200%2C1197&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/rud.is\/b\/wp-content\/uploads\/2018\/07\/app-lod-tree-1.png?fit=1200%2C1197&ssl=1&resize=525%2C300 1.5x, https:\/\/i0.wp.com\/rud.is\/b\/wp-content\/uploads\/2018\/07\/app-lod-tree-1.png?fit=1200%2C1197&ssl=1&resize=700%2C400 2x, https:\/\/i0.wp.com\/rud.is\/b\/wp-content\/uploads\/2018\/07\/app-lod-tree-1.png?fit=1200%2C1197&ssl=1&resize=1050%2C600 3x"},"classes":[]},{"id":12257,"url":"https:\/\/rud.is\/b\/2019\/06\/02\/trawling-through-ios-backups-for-treasure-a-k-a-how-to-fish-for-target-files-in-ios-backups-with-r\/","url_meta":{"origin":13016,"position":2},"title":"Trawling Through iOS Backups For Treasure (a.k.a. How to fish for target files in iOS backups) with R","author":"hrbrmstr","date":"2019-06-02","format":false,"excerpt":"In a recent previous post I brazenly talked over the \"hard parts\" of how I got to the target SQLite file that houses \"mowing history\" for what has become my weekend obsession. So, we'll cover just how to do that (find things in iOS backups) in this post along with\u2026","rel":"","context":"In "iOS"","block_context":{"text":"iOS","link":"https:\/\/rud.is\/b\/category\/ios\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":12537,"url":"https:\/\/rud.is\/b\/2019\/10\/28\/spelunking-macos-screentime-app-usage-with-r\/","url_meta":{"origin":13016,"position":3},"title":"Spelunking macOS ‘ScreenTime’ App Usage with R","author":"hrbrmstr","date":"2019-10-28","format":false,"excerpt":"Apple has brought Screen Time to macOS for some time now and that means it has to store this data somewhere. Thankfully, Sarah Edwards has foraged through the macOS filesystem for us and explained where these bits of knowledge are in her post, Knowledge is Power! Using the macOS\/iOS knowledgeC.db\u2026","rel":"","context":"In "macOS"","block_context":{"text":"macOS","link":"https:\/\/rud.is\/b\/category\/macos\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":12645,"url":"https:\/\/rud.is\/b\/2020\/02\/06\/prying-r-script-files-away-from-xcode-et-al-on-macos\/","url_meta":{"origin":13016,"position":4},"title":"Prying “.R” Script Files Away from Xcode (et al) on macOS","author":"hrbrmstr","date":"2020-02-06","format":false,"excerpt":"As the maintainer of RSwitch --- and developer of my own (for personal use) macOS, iOS, watchOS, iPadOS and tvOS apps --- I need the full Apple Xcode install around (more R-focused macOS folk can get away with just the command-line tools being installed). As an Apple Developer who insanely\u2026","rel":"","context":"In "macOS"","block_context":{"text":"macOS","link":"https:\/\/rud.is\/b\/category\/macos\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":12917,"url":"https:\/\/rud.is\/b\/2021\/01\/26\/making-it-easier-to-experiment-with-compiled-swift-code-in-r\/","url_meta":{"origin":13016,"position":5},"title":"Making It Easier To Experiment With Compiled Swift Code In R","author":"hrbrmstr","date":"2021-01-26","format":false,"excerpt":"The past two posts have (lightly) introduced how to use compiled Swift code in R, but they've involved a bunch of \"scary\" command line machinations and incantations. One feature of {Rcpp} I've always ? is the cppFunction() (\"r-lib\" zealots have a similar cpp11::cpp_function()) which lets one experiment with C[++] code\u2026","rel":"","context":"In "macOS"","block_context":{"text":"macOS","link":"https:\/\/rud.is\/b\/category\/macos\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/rud.is\/b\/wp-json\/wp\/v2\/posts\/13016","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rud.is\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rud.is\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rud.is\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/rud.is\/b\/wp-json\/wp\/v2\/comments?post=13016"}],"version-history":[{"count":0,"href":"https:\/\/rud.is\/b\/wp-json\/wp\/v2\/posts\/13016\/revisions"}],"wp:attachment":[{"href":"https:\/\/rud.is\/b\/wp-json\/wp\/v2\/media?parent=13016"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rud.is\/b\/wp-json\/wp\/v2\/categories?post=13016"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rud.is\/b\/wp-json\/wp\/v2\/tags?post=13016"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}