phsycologicalFudge/SafeHaven-Store

phsycologicalFudge/SafeHaven-Store has 225 GitHub stars and 6 forks. Star changes are not measured yet. Last checked 2026-11-11 01:13 UTC. Last push 2026-11-05.

이 수치를 측정하는 방법

Open-Source alternative app store for Android aimed to provide a secure Google Play alternative, offering verified, open-source apps with built-in malware protection.

225 스타 6 forks

측정된 스타 증가

in 24h: 업데이트 지연
in 7 days: 기록 수집 중
in 15 days: 기록 수집 중
in 1 month: 기록 수집 중

서로 겹치는 기간의 순증가량이며 일별 합계가 아닙니다. 측정값이 없으면 비워 둡니다. 스타는 관심도를 나타내며 품질을 보장하지 않습니다.

README.md

Original

SafeHaven: Where open Android apps belong.

SafeHaven is an Android app store that is focused on trust, source visibility, and very clear app metadata. Apps can be linked to their source repositories, verified against developer ownership, scanned before release, and rechecked after being made available.

[!CAUTION]

Android developer verification is coming...

Android FOSS is under threat. From 2027, Google will require developer verification for all Android apps on certified devices, including those installed outside of the Play Store. https://keepandroidopen.org/

What is SafeHaven?

SafeHaven is an Android app distribution platform built around transparency. Instead of using the 'trust me bro' methology, SafeHaven aims to show where the app comes from, whether the source has been verified, and if it has passed all malware checks.

Trust layers

Layer	What it does
Source linked	Apps can include a public source repository.
Verified Source	The developer proves control of the linked repository by adding a .safehaven file in their repo during setup.
Unverified listings	Community/imported apps can be listed without claiming developer ownership.
APK scanning	Submitted APKs are scanned before being approved.
Rechecks	Apps can be rescanned after release to keep metadata fresh.

App submissions

Developers can register and manage their apps. SafeHaven checks submitted APKs through its scan pipeline before they become available in the public catalog.
Community/imported listings are kept separate from verified developer listings.

Want to suggest an app? Use the community submission portal.

Repository structure

Area	What it contains
Android client	Store browsing, app pages, install flow, and UI.
Store logic	Catalog parsing, categories, app metadata, and listing display.
server_code	Backend/store server code for submissions, scanning, storage, and catalog generation.

APK signature verification

Official Android APKs published by ColourSwift are signed with the following certificate:

SHA-256: 9c67f4224888f60e093cf7eab9b194e6d4cd73bb11313638c47b17f0d5f34ec4

You can also verify a downloaded APK with the Android SDK Build Tools command:

apksigner verify --print-certs app-arm64-v8a-release.apk

Building the app

Make sure Flutter is installed, then run:

flutter pub get
flutter run

For a release APK:

flutter build apk --release

For an app bundle:

flutter build appbundle --release

Current status

SafeHaven is still in early development.

How 'safe' is SafeHaven

Nobody can claim to be perfectly safe. However, SafeHaven leverages commercial security software in the live build to ensure malware doesnt slip through. Along with the work in progress BEP (build evaluation process), to ensure apps riddled with ads and trackers remain off the store.

Translations

SafeHaven uses Weblate for translations. Languages with 70% or higher completion will be available in app

Project links

Licence

SafeHaven Store is split in two categories. The client code & Server code

Client: MIT LICENSE
Backend/Server: AGPL-3.0 server_code/LICENSE