zap.store

The permissionless app store

Download link: https://cdn.zap.store/260579d5bc8b1b53e53116057b85007aa62a52d32e29dece22cf55ce3d129e49.apk

SHA-256 checksum: 260579d5bc8b1b53e53116057b85007aa62a52d32e29dece22cf55ce3d129e49

APK cert hash: 99e33b0c2d07e75fcd9df7e40e886646ff667e3aa6648e1a1160b036cf2b9320

Public Key

npub10r8xl2njyepcw2zwv3a6dyufj4e4ajx86hz6v4ehu4gnpupxxp7stjt2p8

NIP-05 Address

[email protected]

NIP-57 Address

[email protected]

Profile Code

nprofile1qqs83nn04fezvsu89p8xg7axjwye2u67errat3dx2um725fs7qnrqlgpz3mhxue69uhhyetvv9ujuerpd46hxtnfduq3gamnwvaz7tmwdaehgu3wdau8gu3wv3jhvscxl64

Publishing to

relay.damus.io

nostr.oxtr.dev

nostr.mom

Author Public Key

npub10r8xl2njyepcw2zwv3a6dyufj4e4ajx86hz6v4ehu4gnpupxxp7stjt2p8

Show more details

Last Notes

2024-09-06 19:10:45

- reply

The website is a complete WIP right now. Appreciate the offer! We def want that once we redesign

2024-09-06 18:43:59

- reply

This is the way.
I'm dreaming a bit here, but one day we'll have an Aurora-like store within zap.store (would run on a separate relay)

2024-09-04 16:33:00

First self-signed APK on zap.store ✨
Alby Go!
This is awesome @nprofile…qvd6 @nprofile…hpj6 @nprofile…6wfs
(We'll fix the missing icon)
#nevent1q…q8zh

2024-09-03 14:53:33

- reply

And now @nprofile…e5r3 is indexed! How wasn't it there before?
🤙

2024-09-03 14:50:34

This is the way! Thank you @nprofile…6wfs
#nevent1q…zchf

2024-09-02 22:11:03

- reply

On it 🫡

2024-09-02 15:29:05

- reply

(They do have source code there)

2024-09-02 15:18:11

🙃
https://image.nostr.build/b0e17de5689d5464bb5511d2d471aeee50d7cc4c307f495c5cfadd3ebbe80b49.jpg

2024-09-02 14:34:52

Found it!
Fountain will be available on zap.store once we add proper support for closed-source apps.
#nevent1q…c9uu

2024-09-01 16:56:13

- reply

Got it! Amethyst won't let me respond to the DM. Thanks, I will have a look!

2024-09-01 16:49:44

- reply

I'd love to install the app. How?

2024-09-01 16:47:10

Hey @nprofile…0rct it was great to meet you in Riga. I forgot to ask, where can we find the Fountain APK?
If you don't publish it, do you mind confirming here so that we stop looking?
#nevent1q…uncp

2024-08-31 22:17:19

- reply

Yo! I don't know. Did it work for you before? Can you share more info (via DM maybe)? You can tap on the gear icon, scroll down and you'll find system info

2024-08-31 13:22:30

- reply

I think zap.store will be easier to use than Obtainium or downloading APKs from github for this average user

2024-08-31 13:18:05

- reply

Added to zap.store ! @nprofile…9jv9 I put you as builder of the app, or you guys have a Bull Bitcoin npub?

2024-08-31 12:32:12

And zap.store is everyone's, unruggable app store.
Why? Because it's based on nostr events for each app and release, cryptographically tied to actual packages/binaries.
So even if they make feijoada with @nprofile…vpy4 's head for having VPN apps, the app store will just keep running.
It's also open source and you can fork it (we'll make it easier though, and let you manage your relays)
Super early days, but freedom and UX will only go up from here.
#nevent1q…qq30

2024-08-30 14:11:40

- reply

Thanks! I will be updating those docs. Publishing is done via https://github.com/zapstore/zapstore-cli , but needs relay whitelisting

2024-08-30 14:10:12

- reply

Would be awesome! What is your estimated release date?
Working on docs and a few fixes to the publishing code. Should be ready next week.

2024-08-29 18:47:29

- reply

Will have to work on that 🫡

2024-08-29 18:46:25

- reply

👋

2024-08-28 17:12:26

- reply

Done. Does the app have an npub?

2024-08-28 16:45:13

- reply

Yes, it's something I have previous experience with. I love Dart, and it's getting awesomer now with metaprogramming. The part I dislike the most is that it's a Google project.
Kotlin is great too.

2024-08-28 15:53:06

- reply

Awesome, will do

2024-08-28 15:52:01

- reply

That sounds like a great choice

2024-08-28 13:04:22

- reply

I am very productive with Dart, and find Typescript annoying. So I guess it depends.

2024-08-28 12:17:42

- reply

Need an APK on Github releases (for now, adding more sources), do you have one?

2024-08-28 12:08:22

- reply

What does this mean?

2024-08-28 12:07:33

- reply

Just tell us and we'll index it. Self-publishing is slowly rolling out.

2024-08-28 10:34:43

- reply

Check the downloaded APK file hash or the APK signature hash (with AppVerifier for example). Both hashes are in our profile page.

2024-08-27 22:44:39

- reply

We want to remove ourselves as the middlemen! We are signing most app releases on behalf of developers to bootstrap the idea.
What you want is developers signing their own releases.

2024-08-27 22:40:14

- reply

Yes, absolutely. Binaries are relatively small too (around 8MB vs 60+ MB I was getting with JS runtimes)

2024-08-27 22:38:34

- reply

I think you've been there from day one! And tagged with your npub so as soon as we enable zaps you'll get them.
We index a bunch of apps (sign those events) but the idea is that devs sign and publish their own.

2024-08-27 22:26:35

- reply

No problem, I get the confusion. APK verifier checks for the APK signature hash, not the file hash. I provided the file hash on the website but will include both and clarify.
99e33b... is the correct signature hash.

2024-08-27 15:42:11

- reply

Also added as issue 🤣

2024-08-27 15:25:31

- reply

Done!

2024-08-27 15:24:07

- reply

Note that ngit -V will correctly show 1.4.3 !
There was an issue in my computer, that's why you see 0.0.1 in the screenshot

2024-08-27 14:44:21

- reply

Yes!

2024-08-27 14:19:35

Today for the first time in zap.store , a developer has published their own app 🤩
That is ngit by @nprofile…crvd (a CLI package)
We'll be reaching out to more CLI and Android devs to follow suit!
https://image.nostr.build/4f83d806d4845def6d0eff8e0c4006fa439cd92e929826a58eb057cd82e7e7b3.png

2024-08-27 11:06:29

- reply

I see ngit on the relay but I can't install it, as its kind 32267 lacks "f" tags (platform). That's a bit odd. Mind sharing the yaml snippet you used? Also, sure you were on 0.0.4? Check zapstore -v

2024-08-26 22:53:53

- reply

Let us know where you release your APKs!

2024-08-26 13:23:32

- reply

Definitely!

2024-08-26 12:28:43

- reply

Where can we find the APK? @nprofile…0rct

2024-08-26 12:26:41

- reply

Great to meet you too man! Thanks for the feedback, I'll have a closer look at these issues and hopefully add an alternative way of signing

2024-08-22 10:44:21

Are you in #nostriga ?
Come to the Sign your apps workshop! 1pm

2024-08-19 17:42:15

- reply

Waiting for them to clarify where the source code is (on another repository) but might just add it

2024-08-19 10:03:43

- reply

Done!

2024-08-12 22:05:55

- reply

Exactly! Not your twatter web of trust that can be manipulated by Elon

2024-08-12 20:43:08

This is why you should place less trust in domain names, and more trust in your cryptographic web of trust.
zap.store fixes this
#nevent1q…r4mj

2024-08-11 03:03:01

- reply

Any chance you could place your APK release along with the source code? If we index Fedi from fedibtc/fedi-alpha it will appear as if it was closed source (no actual code in that repo)

2024-08-11 03:00:29

- reply

Thank you! Did you let us know your issue and device info alread,? So I can troubleshoot

2024-08-11 02:47:38

- reply

Very close to supporting additional sources.
And zapstore-cli will support uploading local artifacts when self-signing! Working on it right now

2024-08-10 21:00:34

Available now 🫡
#nevent1q…wf9l

2024-08-09 02:43:05

Heard that @nprofile…75er has already made their app source viewable. Does anyone know where?

2024-08-08 21:04:41

🤩
#nevent1q…q3aa

2024-08-08 20:57:11

- reply

Thanks for reporting! I'll check it out later. If it's easy for you do you mind copy-pasting your message in our github issues? https://github.com/zapstore/zapstore/issues

2024-08-07 17:59:50

- reply

Thank you!

2024-08-07 17:59:21

- reply

Yeah, been looking at the altstore approach (essentially self-signing apps). Far from ideal but it would work
And an alternative EU app store, later down the line.

2024-08-03 00:06:26

- reply

Correct. Some people find it is a better UX than Obtainium, or manually downloading APKs

2024-08-02 21:53:30

- reply

Good question. I recently answered this:
#nevent1q…357h
The big difference is that once developers start signing their own apps, and using different relays (we're a few months away from that), there effectively is no centralized walled garden. No other app store doing that. Does that help?

2024-08-01 22:53:29

- reply

Is there an Android app?

2024-08-01 22:51:30

- reply

Another good one is Wormhole William, you can use any other Magic Wormhole client on the other device/OS

2024-08-01 20:19:39

- reply

Thank you my friend! 🫂 we're just getting started

2024-07-30 17:00:13

- reply

When I put out this release with some documentation I'll ping you

2024-07-30 16:21:19

- reply

Woah that was fast! It was a bug that I just fixed.
Let me push out a release with some documentation and I'll let you know

2024-07-30 03:54:09

- reply

@nprofile…xuyp can we get you publishing nak?

2024-07-30 03:50:04

- reply

@nprofile…crvd would you like to try publishing ngit?

2024-07-30 01:48:14

- reply

Thanks amigo 👥
Minor issues then. I'll support remote signing later on, and add a prompt to view and accept the events before publishing

2024-07-30 01:46:21

- reply

@nprofile…pyug same for APKs coming

2024-07-30 01:17:56

Self-publishing coming real soon! Alpha version demo:
https://video.nostr.build/e7908216576fca411f21730c971c751221375143b13d12f4f3124cd96bdd9a0d.mp4

2024-07-26 22:59:09

- reply

One day we'll support sharing artifacts via Bluetooth or radio (along with nostr events for validation)
Zombie-apocalypse proof

2024-07-26 22:56:34

- reply

2024-07-26 22:55:25

- reply

Cool

2024-07-26 22:41:03

Unbelievable, Apple. Not even browsing offline.
Try the following: put your phone in airplane mode and try opening zap.store. You can kill the app and relaunch. Most of the UI just works.
We do it better than Apple.
Local-first FTW
#nevent1q…g4zm

2024-07-26 22:34:16

- reply

Inspect the source code and build the APK yourself. There is a file integrity hash check and an APK certificate hash check but Android enforces this validation anyway.
For first installs you're choosing to trust AppVerifier and not zap.store, that's okay. I can't change who you trust.
However, developers will start signing apps via nostr events so on zap.store you'll be able to check that with your web of trust (via a service or manually)

2024-07-26 21:35:19

- reply

#nevent1q…4tcw

2024-07-26 20:19:12

- reply

Ouch. Can you share your device info via DM? Go to the settings screen and tap on system info to copy it

2024-07-26 19:57:03

Congrats on getting into the secondary app stores! 😆
#nevent1q…mpgg

2024-07-26 15:13:10

Now available
#nevent1q…dxlf

2024-07-26 00:43:49

Thanks for the encouragement!
Just submitted: https://github.com/nostrworld/nostriga/issues/50
If you have a github account you can go give it a thumbs up
#nevent1q…263m

2024-07-25 19:18:24

- reply

Both updates are failing because it's impossible for the indexer to determine the architectures those APKs can run on.
It's mostly that APK is a complete shitshow of a standard, and some devs produce them in weird ways.

2024-07-25 17:34:34

Who's going to be in @nprofile…e5ph?
Thinking of submitting a "Sign your apps" workshop for developers who want to start self-signing their apps on nostr.
We could explore the (upcoming) dev signing tool and its options, publish CLI and Android apps, and go over the NIPs that power all this.

2024-07-24 00:02:53

- reply

Appreciate your response

2024-07-24 00:00:12

- reply

Yeah, it works by guessing the best APK right now. That will change with the new signing tool, I will double-check most apps when that is ready

2024-07-23 21:51:23

- reply

Thanks! Fixed

2024-07-21 22:40:26

- reply

Accrescent's catalog is maintained by a respected community member and checks dev signatures on a third-party database on Github. Correct me if I'm wrong.
While zap.store currently is more or less that, we're aiming to change the status quo trust model.
Users will be able to cryptographically verify an artifact came from a developer using nostr. They can do so directly, relying on a web-of-trust check, or indirectly via curators (choose your own walled gardens).
In addition, we're targeting multiple operating systems and other features like relay-based communities, the ability to zap apps and developers, a marketplace for new apps and more.

2024-07-20 20:44:33

- reply

Should be fixed now

2024-07-20 20:40:38

- reply

Sorry about that. Attempting a fix

2024-07-20 19:08:04

- reply

Right, or until we improve our indexer😆 it will happen soon. How do we know that npub is really theirs?

2024-07-20 19:01:29

- reply

Yes me too. They are reusing the app identifier which is wrong. I will remove it until they fix the issue.

2024-07-20 18:44:26

- reply

Done

2024-07-20 18:39:32

A few more bitcoin wallets available now:
- Breez
- Blitz
- Blixt
If you have other suggestions let us know! Even if it doesn't have a 5-letter B name

2024-07-20 16:19:03

- reply

Done!

2024-07-20 16:18:40

- reply

It's an app store where you define your walled garden

2024-07-20 16:17:33

- reply

Nice. We need binaries as releases on gh

2024-07-20 16:15:27

🫂
#nevent1q…rqmc

2024-07-20 05:09:06

Dreaming of the day when we can add the Accrescent relay/community onto zapstore and find the apps they curated🤙
#nevent1q…3d8l

2024-07-19 23:54:46

- reply

Awesome. What's your compiler?

2024-07-19 23:52:30

Please note: CLI only support standalone binaries for now

2024-07-19 23:51:23

The short term plan
zap.store CLI is a stepping stone to releastr, the work in progress dev signing tool
CLI updates will be released with releastr and releastr will be installable via zapstore CLI
Once command line program releases are solid, in a few days, it's just a matter of merging the APK fetching code to allow dev signed Android releases
From there, adding MacOS, Windows and Linux support is in the horizon.

2024-07-19 22:16:24

- reply

Could not find the releases on github