Mornye Extension Store

Submit Your Extension

1. Fork this repository
2. Add your .sflx package to the extensions/ folder
3. Add your icon image (PNG/JPG, 512x512 recommended) to icons/ folder
4. Add entry to registry.json
   • Ensure icon_url points to the raw file in the repository (e.g. https://raw.githubusercontent.com/mornyeapp/Mornye-Extension/main/icons/your-icon.png)
5. Create Pull Request

Requirements

• Extension must follow Extension Development Guide
• No malicious code
• Clear description of what extension does
• Working download URL and icon URL

Developing the bundled providers

Spotify, Amazon, Apple Music, YouTube Music, SoundCloud, Tidal, Qobuz, Deezer, JioSaavn, Bugs Music, Melon, Genie, and Beatport have reviewable source in sources/<provider>/ and offline regression tests in tests/. Edit the source, bump its manifest version, and run:

node --test tests/*.test.cjs
python3 scripts/build_packages.py
python3 scripts/build_packages.py --check

The tests use Node.js 22 or newer and mock provider responses; they do not contact music services. The Python 3 script creates reproducible .sflx archives and updates their versions and SHA-256 digests in registry.json. Pass provider directory names to rebuild a subset, for example python3 scripts/build_packages.py amazon tidal-web.

Commit source, tests, packages, and registry changes together. Other providers remain package-only until their source is added to this layout.

Signed-session providers omit callbackUrl so the host application supplies its own session-grant callback. This lets Mornye and older host versions return to the application that started verification. Package-only fixes keep the gateway's appVersion unchanged to preserve its existing session scope.

Beatport requires Mornye 5.3.0 and the existing Beatport signed V2 gateway. Its original FLAC and AAC downloads are prepared on that server. See sources/beatport/README.md for its runtime requirements and the bundled host-contract fixture provenance.

Bugs Music, Melon, and Genie provide catalog metadata and URL imports. Their enrichment reads their own track details; it does not call the deprecated Songlink public API. Audio downloads and cross-service matching remain the responsibility of the app's configured download providers. None of the three services publishes ISRC codes, so matching relies on titles, artists, and running times. Track and album lookups read running times from each service's player or mobile metadata; search results and charts do not carry them.

K-Music 2.0.7 review

The third-party 2.0.6 archive was reviewed before updating these providers. Its SHA-256 is 8b629c145f44ad857fe7e48a661f7e09950d65b09354e8b8006bd1f6b1150c5c. The archive contains readable JavaScript, manifests, and the same PNG icons already in this repository. No native executables, install scripts, dynamic code loading, file access, or persistent storage are included.

The original submission fails 28 of the 97 existing provider regression tests. The reviewed update retains running times, mobile imports, complete album lists, source metadata, artwork fallbacks, and Bugs related tracks. It adds period charts, Bugs Music PD albums, and Genie DJ playlist imports. Genie home cards defer playlist and additional chart reads until opened.

The submission's automatic cross-service ISRC/link search is excluded: relaxed artist-and-duration matching can select another recording and rewrite source titles. Requests remain on the declared service domains, and rate limits are not immediately retried. Source changes are rebuilt locally as .sflx packages with matching registry digests, rather than distributing the original archives.

Run the offline checks and explicit read-only service checks separately:

node --test tests/k_music_*.test.cjs tests/bugs-music_related_tracks.test.cjs
node scripts/check_k_music_live.cjs bugs-music melon-music genie-music
node scripts/check_k_music_live.cjs --home bugs-music melon-music genie-music

Live checks never run as part of the offline tests. Cold home feeds took approximately 19 to 21 seconds on the review connection; these pages make multiple service requests and retain their existing five-minute cache.

The ZIP and upstream repository do not include a license. On 2026-11-06 the Mornye maintainer confirmed that the author has granted redistribution permission. Static review establishes the inspected code paths; it is not a malware certification. The 114 K-Music regression tests pass, and live read-only checks verified search, track running times, daily/weekly charts, Bugs Music PD albums, and Genie DJ playlists. The locally rebuilt archives pass the package reproducibility and registry checksum checks.

Review Process

All submissions are reviewed before being added to the store.

License

Copyright 2026 zarzet

This project is licensed under the GNU Lesser General Public License v3.0 only (LGPL-3.0-only), together with the incorporated GNU GPL v3.0 terms.

Source-backed extension packages include LICENSE, COPYING, and NOTICE. Third-party components retain their own license notices.