hence the code for apps table try to use launch services which may give flakey results https://github.com/facebook/osquery/blob/master/osquery/tables/system/darwin/apps.mm#L243