Use `.diff`, not the patch; see `brew audit nant`.