SafeHaven-Store - Open-Source alternative app store for Android aime

项目说明

<p align="center">
<img src="assets/gitImages/banner.png" width="100%" alt="SafeHa">
</p>

<di="center">

SafeHaven: Where open Android apps belong.

SafeHaven is an Android app store that is focused on trust, source , and very clear app metadata. Apps can be linked to their source repositories, against de ownership, scanned before release, and rechecked after being made a.

![Release]()
![Downloads]()

<a href=" src=" alt="Translation status"></a>

<img src=" alt="Get it on SafeHa">
<img src=" height="62" alt="Get it at IzzyOnDroid">

</div>

---

> [!CAUTION]
> ### Android de is coming...
> Android FOSS is under threat. From September 30, 2026, Google will require de for all Android apps on certified devices, including those installed outside of the Play Store.

What is SafeHaven?

SafeHaven is an Android app distribution platform built around transparency. Instead of using the 'trust me bro' methology, SafeHaven aims to show where the app comes from, whether the source has been , and if it has passed all malware checks.

Trust layers

| Layer | What it does |
|---|---|
| Source linked | Apps can include a public source repository. |
| Source | The de pro of the linked repository by adding a .safehaven file in their repo during setup. |
| Un listings | Community/imported apps can be listed without claiming de ownership. |
| APK scanning | Submitted APKs are scanned before being approved. |
| Rechecks | Apps can be rescanned after release to keep metadata fresh. |

App submissions

De can register and manage their apps. SafeHa submitted APKs through its scan pipeline before they become a in the public catalog.

Community/imported listings are kept separate from de listings.

Want to suggest an app? Use the App Suggestions discussion.

Repository structure

| Area | What it contains |
|---|---|
| Android client | Store browsing, app pages, install flow, and UI. |
| Store logic | Catalog parsing, categories, app metadata, and listing display. |
| ser | Backend/store server code for submissions, scanning, storage, and catalog generation. |

APK signature

Official Android APKs published by ColourSwift are signed with the following certificate:

SHA-256: 9c67f4224888f60e093cf7eab9b194e6d4cd73bb11313638c47b17f0d5f34ec4

You can also a downloaded APK with the Android SDK Build Tools command:

apksigner --print-certs app-arm64-.apk

Building the app

Make sure Flutter is installed, then run:

For a release APK:

For an app bundle:

Current status

SafeHaven is still in early de.

How 'safe' is SafeHaven

Nobody can claim to be perfectly safe. However, SafeHa commercial security software in the li to ensure malware doesnt slip through. Along with the work in progress BEP (build e process), to ensure apps riddled with ads and trackers remain off the store.

Translations

SafeHaven uses Weblate for translations. Languages with 70% or higher completion will be a in app
<a href=" src=" alt="Translation status"></a>

Project links

<p>
<a href="
<img src=" alt="Discord">
</a>
<a href="
<img src=" height="40" alt="Buy me a coffee">
</a>
</p>

Licence

SafeHa is split in two categories. The client code & Server code

Client: MIT LICENSE

Backend/Server: AGPL-3.0 ser/LICENSE

项目信息

开发语言：Dart

Star 数：207

技术要点

该项目属于病毒分析方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Open-Source alternative app store for Android aimed to provide a secure Google Play alternative, offering verified, open-source apps with built-in malware protection.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。