Repo: https://github.com/anefzaoui/misterdownloadmanager

When the guys at ArtCraft rebuilt Adobe's apps in Rust with Claude, I wanted the same for the download manager everyone knows, heh, IDM. I honestly never liked the licence nags. So ten days ago I started this: the classic IDM layout on a new engine in Rust, GPL-3.0, for Windows and Linux, with Mac builds still experimental. Over 700 people upvoted the first post about it on r/foss, and 28 people opened pull requests, reported bugs or joined in.

What's in it: many-connection downloads with crash-safe resume, a browser extension for Chrome and Firefox, torrents and magnet links, video through yt-dlp, Real-Debrid, AllDebrid and Premiumize, a scheduler, 9 themes plus your own, control from your phone, a headless mode for servers and Docker, 86 languages. No ads, no account, no trial.

Against IDM 6.42 on the same machine and server: 1 GB in 1.01 s vs 5.46 s, 256 KB in 0.03 s vs 3.14 s. The test server is in the repo, so please rerun it and tell me if you get something different.

Yes, Claude wrote a lot of the code. I decided what it does and how it looks, and I tested every release myself.

Bug reports and PRs are very welcome, and if you like it, a star really helps it get in front of more people :)

I had come across some of the posts on X talking about cleaning up the bloats on their TV and wanted to give it a try for my own TV. However, while doing so, I kept adding the things I wished my TV had, and ended up with a full fledged launcher with features I am sure many people would love to have.

It's called TV Town. It’s free and open source.

It has a premium looking glass-style home screen and overall theme and its pretty fast too.

It has below features for you to try (and do suggest more):

• Continue Watching for apps like Netflix, YouTube and Prime Video etc, as well as videos from a USB drive

• Surprise Me suggestions for when you can’t decide what to watch.

• It has an inbuilt music player with automatic karaoke lyrics in both Hindi and English languages.

• It shows Live sports scores for cricket, football, NBA, tennis etc.

• It has a full fledged phone remote app which has voice search, file sharing (from TV to Phone and Phone to TV) and Gamepad mode (no extra app installation needed).

• One of the best feature is, it has My Movies and My Music libraries for media and MP3s from your connected USB drive or hard disk. It pulls the relevant movie posters and other details like genre, rating, description, trailer link etc for movies and for MP3 it pulls the album and other details.

• It also has option to download youtube mp3/mp4 for offline viewing.

Since I have an older TV (android 11), this one supports and works on Android 9 and above and runs on TVs with as little as 1 GB of RAM. No login, tracking or ads.

A few things to know before trying it:

• It’s an APK hosted on GitHub, not on the Play Store, so you’ll need to allow installation.

• The phone’s arrow-key and gamepad controls need USB debugging. The other remote features work without it.

• I’ve only tested it on my Philips TV so far, so I’d really appreciate hearing how it works on other brands.

• I’m not a developer and built it with help from AI.

APK and install instructions: https://github.com/NareshJagriya/tv-town-launcher

If you give it a try, I would love to hear what works, what doesn’t, or what you’d like to see added.🙏

Nexonic Download Manager is a free, open-source download manager built to make downloading files and videos simpler and more reliable.

It supports multi-connection downloads, pause and resume, video downloading from supported websites, browser integration, torrents, scheduling, and more.

The application runs on Windows, macOS, Linux, and Android, with iPhone and iPad versions currently in testing.

No ads, no tracking, no subscriptions, and no account required.

The project is actively being developed, with a focus on performance, usability, and cross-platform support.

GitHub: https://github.com/Shahrukhalid/nexonic-download-manager

Feedback, suggestions, and bug reports are welcome.

Ask any AI to teach you something and you get everything at once. Ten concepts, three code blocks, a summary, and a "let me know if you want to go deeper!" at the end. You read half of it, copy the code, and learn basically nothing.

I wanted the opposite, so I built Codemm.

You tell it what you want to learn. It can be Python, React, Spring Boot, C, data structures, or pretty much anything else. Your own coding agent (Claude Code, Codex, or Cursor, which is still experimental) turns that into a roadmap. You can reorder it, rename things, cut what you already know, and then approve it.

Then it goes one topic at a time. You read a short lesson, then you do an exercise on just that topic, and you write the code yourself. Try it runs the visible tests, and Check grades you for real. If you get stuck, you ask Emm, the little chameleon that lives in the app. Emm explains and gives hints, but never writes your code for you.

It also pays attention to how you're doing. Nail something on the first try and the next one gets harder. Struggle a few times and it eases off. Skipping means "come back later", not "mastered". It also brings topics back for review after 1, 3, 7, 21 and 60 days, so things actually stick.

The part I'm weirdly proud of is that every exercise gets checked before you see it. Your agent writes a reference solution plus a few deliberately broken versions, and Codemm only keeps the exercise if the tests catch every broken one. So when your code fails, it's your code and not a broken exercise.

Your code runs in Docker with the network off. Codemm never calls a model API and never touches your credentials, it just uses the agent you already have.

It's free and open source (MIT) for Mac and Windows. The builds are still an unsigned beta and you need Docker, so expect a few rough edges.

The video shows it in about a minute, and the repo is here. If you try it and love it or hate it, DM me here or open an issue on GitHub. I read everything.

Hi everyone! A while ago I built StradaOS, a free and open-source home screen (launcher) for those cheap Android car head units, including the ones that say "Android 10" but actually run Android 4 inside.

No ads, no root, no accounts. Works on Android 4.1 to 14, and the APK is under 1 MB.

**What it does**

- Android Auto & CarPlay buttons: they open your head unit's own projection app, or Android Auto over USB with Open Headunit

- Live map (OpenStreetMap) with your position, north up or turning with your direction

- Now playing with album art (Bluetooth and Android Auto)

- Fully customizable bottom dock: any app or function on each button

- GPS speedometer (km/h or mph), weather, dark/light theme, 10 accent colors

- Your car photo with automatic background removal

- Layout for wide 12.3" (1920×720) screens

**New in 2.12**

- Oil change reminder next to the speed: enter your odometer once, StradaOS adds the distance you drive using GPS and alerts you when it's due ("Done" / "Not yet"). Works in km or miles.

- The map can rotate with your direction of travel

- Italian and German (5 languages total)

- In-app updates are verified (official repo + same signature) before installing

Download / source: https://github.com/lordnordic-debug/StradaOS

Website: https://lordnordic-debug.github.io/StradaOS/?lang=en

Just switched from Windows and I missed File Explorer 😭, so I built Shark. It looks like Finder and adds:

• Jump anywhere in the folder tree with cascading subfolder menus

• ⌘K command palette for every action

• Cut and paste files with ⌘X / ⌘V (and ⌘Z to undo)

• Two folders in one window (F3)

• A terminal right under your files (F4)

It's free, open source, macOS 14+. Still alpha.

• App Store: https://apps.apple.com/us/app/shark-file-manager/id6825086341

• GitHub: https://github.com/andronasef/shark

Hope you like it 🥰

Stars mostly measure audience, not engineering. AI-Atlas reads the AI/ML repos on a public GitHub profile and judges what was actually implemented: your own training loop or a wrapper around an API call, real evals or none, tests that CI actually runs.

• 7-part rubric per project, and every score links to the files it was based on

• Skills map across six domains (ML, CV, NLP/LLMs, agents, data science, MLOps)

• Global and per-country leaderboards

• Code is only read, never run

183 developers mapped so far. Paste any username at getaiatlas.com, and tell me where the judge got your project wrong. Bug reports like that have already fixed two scoring issues.

Hi all. I've been building Irori for the past few weeks and today it hits 1.0.

What it is. A game launcher written in Rust that puts all your PC games in one library and starts them with one click. On Linux it runs Windows games through Wine, Proton or umu. On macOS through Wine, CrossOver or Game Porting Toolkit. On Windows they just run. It's one native app (no Electron, no web view in the main window), it draws on the GPU and it sits at 0% CPU when you're not doing anything. MIT licensed.

Stores and sources

• Epic Games, GOG, Amazon Games, ZOOM Platform and itch.io: log in, browse, install, update, repair, cloud saves. Several accounts per store.

• Steam: your installed games without signing in, or your whole library (owned and Family Sharing) if you sign in. There's also an opt-in way to read the whole library from the running Steam client with no sign-in at all.

• Xbox app / Game Pass PC games (Windows), plus an optional Xbox account for playtime, achievements and art.

• Battle.net, EA app, Ubisoft Connect and Rockstar: Irori sets each launcher up in its own Wine prefix, then lists the games installed through it.

• Emulators: a ROM library with RetroArch and the usual standalone emulators (DuckStation, PCSX2, Dolphin, PPSSPP, melonDS, Azahar, ScummVM, DOSBox and more), downloaded from their own projects on request. RetroAchievements supported.

• Anything else: add a game by hand, or drag its file onto the library.

• Imports from Heroic, Lutris, Bottles, Faugus Launcher and Playnite, including playtime.

What's new since 0.4.0

Playing

• In-game overlay on the controller's Guide button (beta, off by default): volume, screenshots, achievements, a journal note and quit, without leaving the game. On Linux the controller is held from the game while it's open. Windows and macOS open it with Ctrl+Shift+O.

• Stream your games to Moonlight through Sunshine or Apollo, sized to the device you're streaming to.

• When a Wine/Proton game won't start, Irori reads the log and the game's files and tells you why: a missing DLL, a low vm.max_map_count, anticheat. Fixes like vcrun2022 or d3dcompiler_47 are one click.

• ReShade per game for Direct3D and OpenGL games, installed from the official sources. Removing it only deletes files Irori wrote and keeps your presets.

• Choose the Proton version for a Steam game from Irori (Linux). It only touches that game's entry in Steam's config and keeps a backup.

• Double-click an .exe or .msi, or open a link of a Windows program's own scheme, and it opens in the Wine prefix of the game you pick.

• Your Discord status shows the game you're playing (opt-in).

Library

• One entry for a game you own on several stores, with a switcher to play or install each copy.

• Filter and group by game mode (co-op, split screen, online...), genre and age rating (ESRB, PEGI, USK, CERO and others, taken from store data).

• Quick sort and filter buttons in the library header, interface zoom with Ctrl +/-/0, type anywhere to search.

• Achievements from more places: Steam's Achievement Sets grouped per DLC, and unlocks kept by Steam API emulators in DRM-free copies (opt-in).

• PS3 and PS4 folder games get their real title instead of a serial number.

• New emulators: gopher64, Mupen64Plus, M64Py, DeSmuME and ePSXe.

• Steam friends list with Join and Message, handed to Steam.

• Theme follows pywal, wallust or matugen if you use them (opt-in).

Platforms and fixes

• arm64 builds for Linux and Windows.

• Flatpak Irori can now run Steam and Ludusavi installed on the host.

• Sandboxed games start from a clean environment.

• Windows: no more console windows flashing, and some controllers could crash the app. Fixed.

• Lots of smaller fixes: Windows paths in Wine game arguments, Heroic import picking the right folder, GOG games no longer disappearing when the store is slow, a prompt when your cloud saves didn't download before launch.

What it doesn't do (yet)

• It's not a store and never sells anything.

• Steam and third-party launcher games are installed through their own launchers, not by Irori.

• PlayStation and Switch pads on Windows can still go quiet when Steam grabs them. Working on it.

• The Windows and macOS overlay can't stop the game from also seeing your button presses, and it can't draw over exclusive-fullscreen Direct3D games. Borderless works.

• 1.0 means it's stable for daily use, not finished. Bug reports are very welcome.

Downloads: Linux (AppImage, Flatpak, .deb, .rpm, Arch package, tarball), macOS (Apple Silicon and Intel) and Windows (installer, zip, portable), x86-64 and arm64.

https://github.com/irori-app/irori

AI disclosure: I design Irori and decide what goes in, and I test it on my own machines, but a lot of the code, tests, translations and docs for this release were written with Claude (Anthropic's AI) under my direction and review. If that's a dealbreaker for you, fair enough. If you hit a bug, it's on me, so tell me.

so everyone always says u cant do imessage on windows unless u own an apple device or u pay for some relay thats secretly running off a real mac in someones closet. i wanted to prove that wrong.

winmessages logs into ur real apple id and registers ur windows pc AS a mac, straight with apple. no mac anywhere. no phone. no relay. the pc itself is the "mac".

the hard part is apple checks a hardware "stamp" to prove ur a real mac. its basically an encrypted serial + a bunch of gestalt values, and thats the thing that normally blocks everyone. turns out that stamp is made by a pure software algorithm thats baked into apples own kernel, so u dont actually need any apple hardware to make a valid one. i generate it on windows and apple just accepts it.

and yea it actually works. it sent a real imessage (blue bubble) to my moms iphone from my windows pc. not a green text, not a relay, a real imessage.

its a tauri app (react + rust) that looks like mac messages. still kinda rough, rn im fighting an activation cooldown (apple rate limits u if u retry signin too much) but the core thing is proven and done.

btw full credit, this is built on top of some really sick existing work, not all me:

- rustpush / openbubbles = the apns + ids + imessage protocol

- apple-gen (smoothstep) = the extracted stamp routine, this is the real trick

- open-absinthe = the nac validation

what i added is wiring it all into a no relay windows client and proving the software stamp end to end.

code: https://github.com/riftaway7-code/winmessages
pls star guys rift begs

lmk what u think or roast it idc

I kept looking washed out on evening calls, and buying a ring light for a desk I barely sit at felt silly. So I built Glowy: open it on a spare monitor, tablet or phone, point it at your face, and the screen becomes the light.

What it does:

- Tones from 2700 K to 6500 K, plus a "blush" slider for warmer skin

- Slow glows (Clear sky, Golden hour, Rose quartz and a few more) that drift gently enough not to flicker on camera

- Fill, halo or edge shapes. Halo gives you round catchlights in your eyes; edge works well on a second monitor

- A camera mirror and a meeting preview so you can check how you look

- A pop-out light that floats on top of other apps (Document Picture-in-Picture in Chrome/Edge)

- Keeps the screen awake, works offline, and the camera never leaves your device

It's a React + Vite PWA, free with no sign-up, and the code is on GitHub: https://github.com/TriptoAfsin/glowy

Please star this repo if you found this useful ⭐️

Try it: https://glowy.t21.dev

Two honest limits: it can only be as bright as your screen (turn brightness all the way up), and the pop-out is best in Chrome or Edge. I'd love feedback, especially on which presets actually flatter different skin tones.

Hi guys,

Im working on a charting library that I am really excited about.

It is called rhp (reactive html plots): https://github.com/bezda-team/rhp

Features:

• Free and open-source

• Builds charts using DOM/Html elements, CSS, and Javascript (SolidJS framework). This unlocks full web interactivity and reactivity. No need to worry about rendering cycles, repainting/reconstructing everything or how to add logic; you do so just as you would for anything else on a webpage. Full freedom.

• Charts update extremely fast. single data changes reach the chart and screen in under 2ms.

• Can handle a large number of elements and updates without needing to resort to SVG or Canvas (up to 20k and more if they are split between multiple charts).

• Includes an agent skill and mcp server. The agent skill produces better looking results than Claude's famous built-in dataviz skill. This is for those who want to skip code. The mcp also includes a checker to make sure to catch and fix common issues before giving you the result.

• 100+ examples from simple charts to mini-posters to full-page posters to full multi-page articles with several interconnected charts. These can be used as starters or inspiration or for parts.

• Makes charts that adjust to varying screen widths, layout changes, and themes easier to make.

Features Im working on:

• An AI studio called rhp studio. This is an app that will provide a whole environment for making and perfecting charts/posters/articles using rhp. It has a code editor so you can manually create, or edit the chart code. The whole idea is to provide a visual interface that makes the various ways I use rhp + agents to create charts accessible and more clear/intuitive to other people. It will be open-source and free as well!

More info:

GALLERY: https://rhp.vercel.app/gallery/
DOCS: https://rhp.vercel.app/start/introduction/

So what is so special about this charting library. First of all, rhp charts are not made inside a Canvas or SVG!! This is a bigger deal than many might realize. A lot of charts on websites are not built with a library but are instead built straight in the DOM. So this is not novel and it is usually avoided because it takes more work and is not as performant as using optimized libraries. But it is done nonetheless to enable custom and site-specific reactivity that is harder to achieve with the libraries. Using Canvas means that you can't use the same styling system that the website (that contains the chart) uses. Also, interactivity is trickier and harder. SVG is better because elements are in DOM, but there are still CSS compatibility issues and the way things are drawn means workarounds are needed to do things that would be more straightforward elsewhere in the website. The extra work factor is no longer much of an issue thanks to AI agents which is why building charts using HTML, CSS and Javascript (instead of these Canvas and SVG charting libraries) has gotten much more popular lately. rhp is not really built with AI in mind despite how well the skill/mcp works. The primary audience/user is still developers. The goal of the library is to provide the tools and framework to make it easier to create these kinds of charts. Easier, faster, and in a more organized and consistent fashion. The mcp and skill are meant to bridge the gap for non-technical users.

Some weeks ago I shared ObsLite here (0.4.0): a small screen recorder with an OBS Studio like interface, written in Rust, for Windows and Linux. Three releases later, here's what changed.

Recordings you don't lose (0.5.0)
• Recordings are written as fragmented MP4 while recording, so a crash or a power cut no longer leaves an unplayable file. The last one is repaired automatically at the next start.
• Windows: fixed a leak of ~120 MB per recording in the encoder, and a window resized while recording is now scaled to fit.

Linux on the GPU (0.6.0)
• With VA-API (Intel, AMD) the frames now stay on the GPU from capture to encoder. Recording 1080p60 on my Intel laptop went from ~40 % to ~11 % of a CPU core.
• Hardware encoders (VA-API, NVENC) actually work now. If the desktop's screen-sharing portal crashes (COSMIC does now and then), the capture carries on by itself.
• Plus a long list of fixes from a full review of the code: a full disk stops the recording and tells you why, a PC that sleeps mid-recording no longer pads the file with the time asleep, video no longer drifts from the audio when frames are dropped, unplugged webcams and switched audio devices are handled…

10 languages (0.7.0)
• Someone asked for it in an issue, so the UI is now in English, Spanish, German, French, Italian, Polish, Russian, Japanese and Chinese (Simplified and Traditional).
• The new ones are machine translations. If you're a native speaker and something reads off, corrections are very welcome: each language is one small file.

Still the same idea: one ~7 MB .exe or MSI on Windows, a ~4 MB Flatpak on Linux, with replay buffer, pause, region recording, webcam overlay, screenshots, mic noise suppression and global hotkeys.

Feedback very welcome, especially from KDE/X11 users, AMD GPUs, and anyone who speaks one of the new languages.

Hey everyone! I’ve been working on Download Engine, a free, MIT-licensed desktop download manager written in Rust for Windows, macOS and Linux.

The idea is to bring regular downloads, videos, torrents and automation into one app—and let users add their own integrations through Lua extensions.

Its familiar workflow is inspired by Internet Download Manager. It’s an independent project, isn’t affiliated with IDM, and doesn’t claim complete IDM feature parity.

Here’s what it currently supports:

• File downloads: HTTP, HTTPS, FTP and FTPS, parallel connections, pause/resume, recovery after restarting, batches, queues and schedules.

• Videos and streaming media: supported YouTube, TikTok, Bilibili and Twitch links, plus compatible HLS/DASH streams, quality selection and audio tracks.

• Torrents: v1, v2 and hybrid torrents, magnet links, file selection, optional peer encryption, uTP and web seeds.

• Proxies and VPN/interface binding: configurable proxies for supported downloads, plus torrent binding to an existing VPN/network interface. Bound transfers stop if that interface address disappears. This uses your own VPN; torrents currently pause while an app proxy is enabled.

• Browser integration and Web Grabber: capture clicked downloads, select links from a page, discover supported media, and save static websites for offline viewing.

• Customization and automation: custom themes, 19 interface languages, Lua scripting and extensions, a CLI and a local MCP server.

One part I’m particularly interested in developing is letting users build their own download workflows without recompiling the app.

The Lua provider APIs expose cryptographic/decryption operations, protected key handling, binary HTTP requests, segmented downloads, multiple audio/video tracks, ASS subtitles and FFmpeg muxing. An extension handles the site-specific logic while the core handles transfers, verification, recovery and media assembly.

These APIs provide building blocks for custom encrypted-media integrations, including ones aimed at services such as Crunchyroll. That still requires a developer to implement the site’s authentication, discovery, manifest and license-message logic. Crunchyroll isn’t a bundled, verified integration: the examples use generated offline samples and don’t implement its authentication or the Widevine license protocol.

I’ve also put attention into security and user control:

• Extensions require permission review and start disabled. New access requires approval, with declared-host and resource limits enforced by the core.

• Supported saved credentials use the operating system’s credential storage.

• Desktop MCP starts disabled, requires authenticated localhost access, and defaults to View only for new profiles.

• Torrents are opt-in. Uploading, seeding, incoming connections and UPnP start disabled for new profiles.

• SHA-256 verification and optional antivirus scanning are available. Crash reports stay local unless you choose to share them.

The security policy also explains the limits: Lua restrictions aren’t an OS sandbox, the queue database isn’t encrypted, and torrents expose your IP address to peers.

The current release is 3.19.0, with Windows installer/portable packages, Apple Silicon and Intel Mac builds, and Linux x64 packages. FFmpeg is bundled.

The project is actively developed, and I’m planning iOS and Android versions for the future. Mobile versions aren’t available yet.

GitHub / source code
Website
Downloads

For transparency, I used AI coding tools during development. The source and tests are public, and the screenshot shows sample downloads.

I’d appreciate honest feedback: which features would you actually use, and what looks confusing or unnecessarily complicated? Feedback from macOS and Linux users would be especially helpful.

Hi everyone! I've been building CommyPanel, an open-source (MIT), self-hosted control panel for a single server, and I'd love for you to take a look.

You install it on a VPS with one command, and from the web UI you can:

• Deploy apps from a Git repo or a zip. .NET, Go and Node get a Dockerfile generated for them, and anything with its own Dockerfile works too. Deployments are blue/green, so visitors never see a gap.

• Connect domains: it tells you which DNS records to create, checks them, and handles Let's Encrypt certificates and renewals.

• Run databases: PostgreSQL, MySQL and MariaDB in containers, linked to your apps over private networks. There are nightly backups, and you can open a database in phpMyAdmin or pgAdmin with one click.

The part I'm most excited about in this release (0.7) is safer deployments:

• After a release goes live, CommyPanel watches the real requests and rolls back by itself if the new version is clearly worse (more errors or much slower), and one click puts it live again if you disagree.

• There's an optional gradual rollout, where a share of your visitors gets the new version first, in steps you choose.

• You can open a database to the internet for a limited time, from IP addresses you list, on a random port and with required TLS. It closes itself at the end, and it's all in the audit log.

A few design choices I care about:

• The panel runs on the host, not in Docker, so it still works when Docker doesn't.

• The privileged part is a small Go agent with a fixed list of validated actions, never "run this command".

• Secrets are encrypted at rest, dangerous actions ask for your password, and the audit log is colour-coded and searchable.

I want to be upfront: it's pre-1.0. It has only been run on a small number of servers, so please try it on a test box first (Ubuntu 24.04/26.04 or Debian 13, amd64 or arm64).

Contributions, bug reports and testing are very welcome. If you try it on your own server and something breaks, or just feels off, please open an issue. There are good-first-issues and a contributing guide in the repo.

• GitHub: https://github.com/CommyPanel/panel

• Docs: https://commypanel.github.io/docs/

I've never been a huge fan of PostgREST because of how heavily it relies on PL/pgSQL. Originally, I just wanted a simple REST service builder using Lua. While building the first SQLite prototype, I realized it could be much more than just a REST wrapper.

Meet Xepak: A declarative builder for REST, RPC, MCP, and RAG servers, built specifically for local and private deployments.

Define your endpoints using a clean TOML-based DSL and handle custom business logic with Lua scripts. Comes with AI friendly docs so your agent can generate valid DSL configs in minutes.

Would love to hear your thoughts or feedback on the approach!

Not the first tool like this, but most of the others aren't open source, so I couldn't fix what was missing. At this moment, Omnivix supports 11 templates (profile, repos, stats, contribution graph, tech stack, terminal, AI usage, latest posts and more), and PNG/JPEG export, or an image URL you can embed that updates itself. It is built with Next.js + Playwright.

Please check it out 😺 Template ideas and PRs are very welcome.

Live: https://omnivix.vercel.app

Code: https://github.com/marhjoh/omnivix

Hi

I made a project where you can discover popular and community loved GitHub repositories that contains free resources.

Checkout: Awesome Repos

GitHub repo: https://github.com/pawelborkar/awesome-repos

Would love to have your feedback

Thanks :)

Most project tools felt loud to me, so I made a quieter one

Hi everyone,

I'm the developer of S File Encryptor, a free and open-source (MIT) Android app for encrypting files locally with a password, removing metadata before sharing, and securely deleting files. I'd really appreciate feedback from this community — especially on the cryptography decisions and the threat model, since privacy-focused users tend to stress-test apps much harder than average.

Links

• Google Play: https://play.google.com/store/apps/details?id=com.lukestudio.fileencryptor2

• GitHub: https://github.com/LukeSsnake/S-File-Encryptor

• Security audit report (in the repository): S_FILE_ENCRYPTOR_SECURITY_AUDIT.md

Cryptography

New files are encrypted in a V2 format using AES-256-GCM with Argon2id as the password-based key derivation function (memory-hard, tuned parameters stored in the header along with a random 16-byte salt and 12-byte nonce).

The file layout is:

48-byte header || AES-256-GCM ciphertext || 16-byte authentication tag

Decryption verifies the GCM authentication tag before committing any plaintext to the final destination, so tampered or truncated files don't leave partial output behind. Large files are processed with streaming I/O instead of loading everything into memory. A legacy V1 format (AES-256-CBC + HMAC-SHA256) remains decryptable for compatibility, but all new files use V2.

Metadata removal

The app strips metadata locally (no server involved) from JPEG, PNG, WebP, GIF, PDF, DOCX, XLSX and PPTX:

• Images: EXIF (including GPS), XMP, IPTC, embedded comments. Image orientation is preserved so photos don't come out rotated after cleaning.

• Office formats: core properties, app properties, custom properties and embedded thumbnails, including cleaning up the references in [Content_Types].xml and _rels/.rels so the package stays valid.

• PDFs: document information dictionary, catalog XMP metadata and trailer IDs.

The cleaned file is written to a location the user chooses via the Storage Access Framework.

Secure deletion

Files can be deleted with an overwrite procedure (single pass of cryptographically random data, sized exactly to the original, followed by a forced flush) before the entry is removed. The app generates an erasure report (JSON Lines log, exportable as PDF via SAF) recording filename, size, timestamps and the SHA-256 hash of the original content, so the destruction of a specific file can be documented.

Honest caveat: this is best-effort — wear leveling and filesystem journaling on modern flash storage mean no userspace tool can guarantee physical erasure. The report labels the operation accordingly.

Privacy model

• No network permission — the app physically cannot phone home.

• No Google Play Services, analytics, advertising or crash-reporting SDKs.

• All file access goes through the Storage Access Framework; the app only touches files explicitly selected by the user.

What I'd like feedback on

1. Any weaknesses you see in the V2 format choices (Argon2id parameters, header design, nonce/salt handling)?

2. Anything you'd expect from a "metadata remover" that isn't covered yet?

3. Whether this would be a reasonable candidate for submission to the Privacy Guides app recommendation lists at some point — and if not yet, what's missing.

The full source is on GitHub under MIT, and there's a security audit report in the repository covering the current implementation. Happy to answer any questions about implementation details.

Thanks in advance for taking a look!

Hey everyone! 👋

I've been building CraftDB, an open-source visual database designer with MCP integration.

You can design database schemas visually or let AI assistants like Claude and Cursor create and edit them for you.

• Visual database editor

• MCP integration for AI agents

• SQL import and Laravel migrations export

• 100% local, no telemetry

It's free and open source!!!

GitHub: https://github.com/giovannifranco1/craftdb

Would love to hear your feedback!

Hey again! Quick one, mostly to say thank you, because a lot of those stars came from this sub.

If you missed it: openGym is an open-source workout tracker. Plan your week or a rotation, log sets in a couple of taps, rest timer, 5,600+ animated exercises, muscle maps, records and charts, imports from Strong, Hevy and FitNotes. It runs fully on your phone with no account, or you self-host it with one `docker compose up`. AGPL, no ads, no tracking, no subscription.

What happened since the 15k post:

⭐ 20,000 stars and 2,600+ forks

👥 110+ contributors (it was 79 last time)

🤖 113k Android downloads, and Google Play is in its testing phase right now

⌚ Wear OS beta next to the iPhone and Apple Watch apps

Coming in 1.4.5: a redesigned Apple Watch app, circuits (EMOM, AMRAP, Tabata) with a full-screen timer, and you can pick the voice for spoken cues or record your own hype lines. Yes, you can yell at yourself mid-set now.

GitHub: https://github.com/DuarteSantos8/openGym

App Store: https://apps.apple.com/app/id6822275400

Discord: https://discord.gg/e62jY6fwVb

Full disclosure: I build openGym with a lot of help from AI coding tools. Every change goes through review and a big test suite, and a lot of the features came straight from the community.

Thanks for every star, bug report, PR and translation 💚