phsycologicalFudge/SafeHaven-Store

技术话题

# android # app-store # open-source # security # flutter

使用的依赖

依赖清单 27 项

flutter{"sdk":"flutter"}
go_router^16.3.0
flutter_riverpod^3.2.1
cached_network_image^3.4.0
shared_preferences^2.3.0
url_launcher^6.3.0
http^1.2.2
file_picker^8.1.2
app_links^6.3.3
crypto^3.0.6
path_provider^2.1.5
convert^3.1.2
flutter_markdown^0.7.4
cupertino_icons^1.0.8
palette_generator^0.3.3+7
package_info_plus^9.0.1
permission_handler^11.3.1
workmanager^0.9.0+3
flutter_native_splash^2.4.7
image_picker^1.1.2
crop_your_image^1.0.0
flutter_svg^2.2.3
flutter_localizations{"sdk":"flutter"}
intlany
flutter_test开发依赖{"sdk":"flutter"}
flutter_lints开发依赖^5.0.0
flutter_launcher_icons开发依赖^0.14.1

所在榜单

Rising#55

原始 README

以下为英文项目原文快照，最新内容请访问 GitHub。

展开 / 收起项目 README

SafeHaven banner

SafeHaven: Where open Android apps belong.

SafeHaven is an Android app store that is focused on trust, source visibility, and very clear app metadata. Apps can be linked to their source repositories, verified against developer ownership, scanned before release, and rechecked after being made available.

Release Downloads License

Translation status

Get it on SafeHaven Store Get it at IzzyOnDroid

[!CAUTION]

Android developer verification is coming...

Android FOSS is under threat. From September 30, 2026, Google will require developer verification for all Android apps on certified devices, including those installed outside of the Play Store. https://keepandroidopen.org/

What is SafeHaven?

SafeHaven is an Android app distribution platform built around transparency. Instead of using the 'trust me bro' methology, SafeHaven aims to show where the app comes from, whether the source has been verified, and if it has passed all malware checks.

Trust layers

Layer	What it does
Source linked	Apps can include a public source repository.
Verified Source	The developer proves control of the linked repository by adding a .safehaven file in their repo during setup.
Unverified listings	Community/imported apps can be listed without claiming developer ownership.
APK scanning	Submitted APKs are scanned before being approved.
Rechecks	Apps can be rescanned after release to keep metadata fresh.

App submissions

Developers can register and manage their apps. SafeHaven checks submitted APKs through its scan pipeline before they become available in the public catalog.
Community/imported listings are kept separate from verified developer listings.

Want to suggest an app? Use the App Suggestions discussion.

Repository structure

Area	What it contains
Android client	Store browsing, app pages, install flow, and UI.
Store logic	Catalog parsing, categories, app metadata, and listing display.
server_code	Backend/store server code for submissions, scanning, storage, and catalog generation.

APK signature verification

Official Android APKs published by ColourSwift are signed with the following certificate:

SHA-256: 9c67f4224888f60e093cf7eab9b194e6d4cd73bb11313638c47b17f0d5f34ec4

You can also verify a downloaded APK with the Android SDK Build Tools command:

apksigner verify --print-certs app-arm64-v8a-release.apk

Building the app

Make sure Flutter is installed, then run:

flutter pub get
flutter run

For a release APK:

flutter build apk --release

For an app bundle:

flutter build appbundle --release

Current status

SafeHaven is still in early development.

How 'safe' is SafeHaven

Nobody can claim to be perfectly safe. However, SafeHaven leverages commercial security software in the live build to ensure malware doesnt slip through. Along with the work in progress BEP (build evaluation process), to ensure apps riddled with ads and trackers remain off the store.

Translations

SafeHaven uses Weblate for translations. Languages with 70% or higher completion will be available in app Translation status

Project links

Discord Buy me a coffee

Licence

SafeHaven Store is split in two categories. The client code & Server code

Client: MIT LICENSE
Backend/Server: AGPL-3.0 server_code/LICENSE

MinosPrime ↗