zap.store

The permissionless app store

Download 0.1.4 for Android: https://cdn.zap.store/825efbb65b6ce5e59884c28ba195efb62e9729ba0004bc1de38d0574078b465a.apk

SHA-256 checksum: 825efbb65b6ce5e59884c28ba195efb62e9729ba0004bc1de38d0574078b465a

APK cert hash (for AppVerifier): 99e33b0c2d07e75fcd9df7e40e886646ff667e3aa6648e1a1160b036cf2b9320

Public Key

npub10r8xl2njyepcw2zwv3a6dyufj4e4ajx86hz6v4ehu4gnpupxxp7stjt2p8

NIP-05 Address

[email protected]

NIP-57 Address

[email protected]

Profile Code

nprofile1qqs83nn04fezvsu89p8xg7axjwye2u67errat3dx2um725fs7qnrqlgpzemhxue69uhhyetvv9ujumn0wd68ytnzv9hxgqgdwaehxw309ahx7uewd3hkcxy8u7j

Publishing to

relay.nostr.band

nos.lol

nostr.mom

Author Public Key

npub10r8xl2njyepcw2zwv3a6dyufj4e4ajx86hz6v4ehu4gnpupxxp7stjt2p8

Show more details

Last Notes

2024-11-21 20:38:24 GMT

Backend dev: interested in helping Zapstore?
Here's a one-off job.
Build the new Zapstore relay on @nprofile…c9z9 's Khatru library in Go.
It must:
- Do fulltext search on specific fields and tags (NIP-50)
- Implement NIP-86 for whitelisting devs and apps
It should be a drop in replacement for the current relay. Search quality roughly similar to current, to start with. We can discuss the most appropriate search/DB stack.
Not sure if this should be a bounty or paid job, so I'm open to offers! Not to mention have the honor badge of having helped the project 🥇
Hit me up!

2024-11-18 02:07:06 GMT

The right Zapstore is on the... right 👌
#nevent1q…h4w3

2024-11-13 18:00:41 GMT

🚀 MIGRATION RELEASE 0.1.5
Zapstore moved to zapstore.dev and with that the app identifier (new app for Android).
Simply find it and install it, then remove the old zap.store
Uninstall apps bug fixed, bigger toasts and with clearer info and actions, and much more.
https://image.nostr.build/5e1b8ce7830bc1ec8531eaeaf775359827d445565012d02db20998293953295e.jpg

2024-11-12 17:14:57 GMT

Heads up! We're rebranding zap.store to Zapstore.
The premium domain renewal is too expensive, so I'm moving it to zapstore.dev for years to come. The middle dot is also confusing for pronounciation.
Website, relay, CDN will all be moving to the new domain in the next release, coming this week.
(Feel free to contact @nprofile…ucf3 , @nprofile…0sa3 or @nprofile…je4n + out of band if you need confirmation)
Please share! 🫂

2024-10-24 15:48:19 GMT

🚀 zap.store for Android 0.1.4 released
- Introducing curated app sets. Not only zap.store curations but great ones by @nprofile…hdd2 and @nprofile…deau
- By tapping on "Load more" releases it's now possible to browse all apps in the relay
And also:
- Significant performance improvements and "loading forever" bug fixed
- UX improvements around app cards and versions
- Dozens of other fixes
https://image.nostr.build/6ef0361bf5236ba793b6bd75083def41bd130f3d5113445ccebe5cbf9a279e90.jpg

2024-10-15 23:38:09 GMT

- reply

Yes

2024-10-15 16:43:58 GMT

- reply

Let us know if you have any issues!

2024-10-15 01:26:05 GMT

- reply

Agreed

2024-10-15 00:50:12 GMT

- reply

👋

2024-10-14 19:53:12 GMT

- reply

Reach out and I'll pass you a zapstore.yaml for Fountain
Docs: https://github.com/zapstore/zapstore-cli

2024-10-14 16:52:23 GMT

- reply

In the next few days, probably. Pretty much done. I'm working very hard on it but I don't want to stress more about it.
Thanks for the patience🙏

2024-10-14 16:22:08 GMT

- reply

Your wish is my command 🫡
Search for zmninja now!

2024-10-14 16:07:09 GMT

Pretty wild to look back at the first version ever of zap.store, 8 months ago.
We had no Android, no APKs, no custom relay, no Dart library, no indexer, no CLI... what a ride!
#nevent1q…2hvn

2024-10-14 15:59:31 GMT

- reply

Great to hear you're still around!

2024-10-13 16:29:52 GMT

- reply

Great to hear!
There's some cool stuff coming up, and our current dev version is significantly more performant

2024-10-13 16:25:06 GMT

- reply

Obrigado!

2024-10-13 16:23:34 GMT

- reply

We have some work to do in terms of docs before suggesting it for Accrescent
Unfortunately I think the graphene people are no longer active on nostr

2024-10-12 11:49:43 GMT

#0xchat signed by @nprofile…f30t LFG 🚀
https://image.nostr.build/fe6bb7198da3dfe36659c397ba45c55709c87f6fad73dea7a4b09414f9e58c35.jpg

2024-10-11 23:19:57 GMT

Very cool. You know where to get it.
https://image.nostr.build/f704313135226b167796d172fcbc4ccb1dc1c8504be4246032d2f55f8d7fa97b.jpg
#nevent1q…hknx

2024-10-11 20:24:39 GMT

- reply

That would be awesome! @nprofile…k3g5 would you

2024-10-11 20:04:37 GMT

- reply

Wish I could go to AMS 😆 Thanks though!
We had a look at mobifree a few months ago. Interesting but with its problems

2024-10-11 02:28:57 GMT

- reply

Thank you Matt!
We'll need to think about that one. Obtainium-type fetching likely won't happen, but an idea was to allow having another "wild west" relay where users could suggest any repo to be indexed.

2024-10-10 17:40:12 GMT

- reply

Tracking issue: https://github.com/zapstore/backlog/issues/6

2024-10-10 17:37:51 GMT

The top four requests that our users provided in the feedback screen:
- Loading issues, greyed out placeholders. There was a race condition in relay client initialization that seems to fix it
- Listing all available apps for discovery. This is coming in the next release! I will be implementing in the next few days
- Updating apps issues. Showing the error reason more prominently on screen now
And lastly, background updates. This is planned for a release of the next milestone, likely by end of year.
Thank you all for your feedback, it's really helpful 🫂

2024-10-09 22:35:06 GMT

- reply

Love Spring but it seems development has stopped? @nprofile…t838

2024-10-09 22:33:05 GMT

Two well-known apps valued by privacy-minded users have just been added:
Tutanota and Standard Notes

2024-10-08 19:26:11 GMT

- reply

Tout a fait

2024-10-07 22:28:40 GMT

zap.store soon listed in Guulag Play?
👀
https://www.theverge.com/policy/2024/10/7/24243316/epic-google-permanent-injunction-ruling-third-party-stores
h/t @nprofile…lx75

2024-10-07 13:57:24 GMT

GM!
Heads up android users, I'm working to get a new zap.store app release this week (if all goes well).
Lots of plumbing work to fix most errors users have been experiencing in the past months. And maybe one or two features too. Stay tuned!

2024-10-07 13:40:19 GMT

- reply

Yes! Adding a button to load more releases, as a first step. In the next release.

2024-10-06 23:32:48 GMT

- reply

*I didn't mean the APK, but the recipe on how to fetch version and artifact, so once it's set up we automate that

2024-10-06 23:30:12 GMT

- reply

Good question! Each APK needs to be added manually and so it's vetted. With updates to the UI we'll start making these things more clear. And next year integrating DVMs to help with these checks.
The idea is to bring many more FOSS apps that are not as releases on Github.
In reality this doesn't change much from the current practice of ingesting Github releases. Some of those could theoretically be compromised.

2024-10-06 23:02:11 GMT

Well, it's on zap.store now 👀
How? I'm writing the new parser that picks up APKs from all over the web from our indexer.
Work in progress! But expect a TON more apps soon.
https://image.nostr.build/b64b7ac9ed9d42ab1f9b629e23a9c9c17d643b50d479cb48e2d92f66120ab124.jpg

2024-10-06 22:19:59 GMT

The status quo in app distribution:
"AntennaPod is officially published only in [Play Store and F-Droid] because we don’t have the time to support more."
"All other stores listing AntennaPod copied the app without our explicit permission. We are not responsible for updating those or making sure they work correctly."
"F-Droid usually takes a few days until updates become available. If an update is still not available more than a week after its release, feel free to let us know"
Now imagine all app releases signed on nostr by developers. As soon as they publish the event, updates get instantly pushed to the users. Secure*. Social. No third parties required. Permissionless. Directly monetizable. Unstoppable.
We are going to make it happen.

2024-10-04 18:58:29 GMT

- reply

We had an issue due to the size of the Fountain APK but it's fixed now.
@nprofile…3xgh @nprofile…0rct you can use the zapstore-cli tool (0.1.0)!
If you had it installed, to update just do: zapstore install zapstore

2024-10-03 00:07:26 GMT

- reply

Awesome!

2024-10-02 18:53:13 GMT

Ladies and gentlemen, Coracle by @nprofile…ntf8 is in the house!
https://image.nostr.build/68f92bd2a3986ec9cc3505312d390bc248bec38b97a905650b01baf5d4017a5b.jpg

2024-10-02 18:41:56 GMT

- reply

By the way, @nprofile…ntf8, I tested with the following snippet and it did work for me:
Just run it like: zapstore publish coracle (that will pull from github)
coracle:
android:
repository: https://github.com/coracle-social/coracle
artifacts:
- app-release-signed.apk

2024-10-02 16:57:25 GMT

- reply

@nprofile…ntf8 would you mind updating (zapstore install zapstore, or pull from latest) and let me know if it works now? 🤞

2024-10-02 16:53:00 GMT

- reply

@nprofile…mqvn icon and images for ya🤙

2024-10-02 16:52:03 GMT

🚀 zap.store cli 0.1.0 released
Developers:
- you can now pass icon and images for your app
- the "artifacts" yaml attribute is no longer needed if you don't pull from github (and use the -a argument)
- identifier also no longer needed
- updated docs in the repo README
🏋️ Those trying to upload bigger APKs, this is now fixed as well.
To update run: zapstore install zapstore
(or install from the release on github)

2024-10-02 14:46:01 GMT

- reply

Thanks! Mastodon seems ok to me, can you try refreshing?

2024-10-02 00:15:58 GMT

- reply

You can also paste your npub and it will work! Again, if you trust the author/signer (greenart7c3) then just install

2024-10-02 00:05:15 GMT

- reply

Thanks for trying out zap.store! If you trust our account you can go ahead and install. The NIP-05 is not necessary, but better when you want to have extra assurance

2024-10-01 15:19:43 GMT

- reply

Would be so cool. The current categories are "list of apps" events (kind 30267), we could allow devs to push these to the relay as well. Needs more thought, though

2024-10-01 13:07:21 GMT

- reply

Everything will be released in due course, but what are you referring to specifically? Cli first (likely today or tomorrow) and then the Android app

2024-09-30 23:53:03 GMT

- reply

I think it's the same issue of the other day. It's fixed! Working on other bugs as we speak, to be able to release all the fixes asap!

2024-09-30 23:49:38 GMT

- reply

Also working on the Android app where bugs have been fixed. I don't think it's a LineageOS specific issue. A little more patience and we'll have 0.1.4 released (or you can try building from source!)

2024-09-30 19:53:25 GMT

An issue where the button reads "Sorry release is incompatible with your device" has just been fixed.
If you keep experiencing it, go to Settings (⚙️) and tap on Delete cache.
It was a data issue where the latest release events were invalid (numbers instead of strings in nostr tags). These releases (around 30) were removed from the relay.
Since we are transitioning to zapstore-cli to power our indexer, which always generates valid events, the problem is fixed but it will take a few days to deploy. So no updates for a few days.
Developer signed releases are not affected.
#nevent1q…4tvd

2024-09-30 17:55:28 GMT

- reply

Thanks. I'm fixing that rn

2024-09-29 18:01:50 GMT

- reply

Interesting, I will check. Thanks

2024-09-28 18:24:57 GMT

- reply

Ok, thanks!
We will start supporting other architectures (than arm64-v8a) in a few more releases. Before the end of the year

2024-09-28 17:53:23 GMT

- reply

Hey, which app? What is the actual error message?

2024-09-28 17:26:56 GMT

- reply

@nprofile…vzaw if you'd like to display images and a longer description you can pull extra metadata from the Play Store (use --overwrite-app)

2024-09-28 16:42:30 GMT

One of my dreams come true, @nprofile…s8dt by @nprofile…vzaw is now self-signed in zap.store!
(If you see the old signer, pull to refresh)
https://image.nostr.build/223c442dfeb91ab622f088df78e8056a8b0ee29296e5ee2b8826cfda5511443e.jpg

2024-09-28 16:37:10 GMT

- reply

I'm not against it but you need to trust the website host then.
Ideally we want multiple websites pulling these events. https://zap.store eventually will show this info, and then something like an app in nostrudel "more" could work too

2024-09-28 16:13:09 GMT

- reply

zap.store does this for you, but you are right that for verifying zap.store itself you need to either trust the domain or verify the hash.
This is why we publish hashes in our nostr profile.
If you already have AppVerifier, that's one way. Or you could do it in the computer. Would be nice to have tutorials for both

2024-09-28 14:48:27 GMT

- reply

Which hashes? Can you explain what your goal is?

2024-09-28 14:42:30 GMT

- reply

Awesome. I need to delete the previous app event for Amethyst version to show! When I get back to the computer

2024-09-28 13:44:08 GMT

- reply

Owned by whom?

2024-09-28 13:36:05 GMT

- reply

That's the whole point of app stores

2024-09-28 13:20:22 GMT

One of zap.store goals is to finish what PGP never could.
I share your concern and to bridge the PGP-nostr gap we have NIP-39 cryptographic identities that soon will be integrated into zapstore-cli.
https://github.com/nostr-protocol/nips/pull/1335
Other tools could be built to leverage these events and feed them into Openkeychain for example.
That said, you mention "updates" and a phone which I suppose is Android. Keep in mind that the OS handles this verification for you, so no worries except on first install.
#nevent1q…jg7h

2024-09-26 18:44:22 GMT

- reply

Correction, Ser: it's also available as CLI (even though we have like 5 packages there😆)
The app currently mostly runs on MacOS but we need to rework the installer for different OSes. It's not a huge amount of work to get on MacOS and Linux.
That paired with the new zapstore-cli tool (for devs and as crawler) which supports basically any platform (OS/architecture) to be available as nostr events.

2024-09-26 18:29:36 GMT

- reply

If you have ideas a great place to leave them, too, is:
https://github.com/zapstore/backlog/issues

2024-09-26 18:22:31 GMT

To all our users who leave feedback in the Settings screen... we don't answer but do read you and take your comments into consideration
🫂

2024-09-25 21:15:54 GMT

- reply

Great job guys... LF...GO!

2024-09-25 20:31:31 GMT

- reply

Fixed and pushed! If you want to build from source it's there, otherwise I'll cut a new release tomorrow

2024-09-25 20:03:59 GMT

- reply

😭
Will investigate promptly, sir

2024-09-25 20:03:16 GMT

- reply

Thanks! It will go with a big fat closed source label 😄

2024-09-25 17:51:02 GMT

- reply

💪

2024-09-25 16:31:22 GMT

- reply

All that should be fixed now!
zapstore install zapstore to update to 0.0.6 and try again

2024-09-25 16:28:37 GMT

- reply

@nprofile…rdp9 @nprofile…9zgs this should fix it for you!

2024-09-25 16:27:15 GMT

🚀 zap.store cli 0.0.6 released!
Bug fixes and small improvements
To update:
zapstore install zapstore

2024-09-25 01:59:28 GMT

- reply

Thank you!

2024-09-25 01:58:34 GMT

- reply

Actually zap.store fetches most apps from Github. But with additional security guards (checking hashes signed by the dev), web of trust display and better discovery. And soon zaps. Obviously Github directly has way more apps, but we're getting there.

2024-09-25 00:29:09 GMT

- reply

PWAs are planned, it's one way we'll support iOS.
Also experimented with packaged PWAs, that don't require visiting a website

2024-09-25 00:26:06 GMT

- reply

Why not download both from zap.store instead?
The Amber release for example is signed by the developer himself. We hope to do the same for 0xchat soon

2024-09-24 20:49:36 GMT

- reply

👋

2024-09-24 19:05:11 GMT

Very interesting, and exactly what we seek to fix.
Beyond curated relays and web of trust, there definitely are plans to incorporate external services reports for malware, reproducible attestations and much more - likely through a DVM open market.
Some planned: https://github.com/zapstore/zapstore/milestone/3
#nevent1q…ymtn

2024-09-24 18:58:14 GMT

- reply

Need t-shirt of this

2024-09-24 18:57:24 GMT

- reply

Awesome @nprofile…ahfv ! We did have some similar by @nprofile…u9av but need to find where they are

2024-09-23 14:46:08 GMT

- reply

Heads up: There is something broken when accessing the citrine screen, and I can only have a look later today. Spoke too soon😄

2024-09-23 14:06:16 GMT

Citrine has been signed and published by @nprofile…fpck , just sayin' 🤩

2024-09-21 14:06:45 GMT

- reply

Probably us 😄

2024-09-20 20:22:22 GMT

- reply

Ouch, sorry about that. I will be fixing that over the weekend and let you know!

2024-09-20 17:07:16 GMT

- reply

Right. Can you retry with --overwrite-release ?

2024-09-20 16:14:01 GMT

- reply

Yes🙏 It's early days so nsec only. Promise we don't rug, but otherwise you can build from souce. I also need to add your npub to our relay whitelist. If it sounds good lmk!

2024-09-20 15:55:01 GMT

It's available now!
@nprofile…9zgs if at any point you'd like to self-publish just let us know.
#nevent1q…dtc4

2024-09-19 13:30:24 GMT

- reply

Feel free to open an issue on our github!

2024-09-19 12:50:42 GMT

Great question! Zapping releases is coming soon.
Currently focused on bringing more developers to self publish, and ironing out the last bugs around those tools. Then, entering the zap milestone.
I'll make zap.store live up to its name⚡😄
#nevent1q…hx0n

2024-09-18 16:26:04 GMT

- reply

No worries, thanks!

2024-09-18 15:01:17 GMT

- reply

Hmm interesting. What happens when you tap on Update?
It might be an issue on their side, as most APK versions resolve via versionCode and not versionName (the one you are seeing)

2024-09-18 12:19:29 GMT

- reply

Love it!

2024-09-18 11:42:19 GMT

- reply

Cool that it worked, but that is strange. What YAML were you using?

2024-09-18 11:39:18 GMT

Couldn't agree more
@nprofile…jpuv we need an icon kit!
#nevent1q…9h5p

2024-09-17 21:27:37 GMT

- reply

Thanks 🫂 and as I said in my quote-note the situation will improve with everything I mentioned.
It is a way to get the "follows who follow" feature in an optimal way (fast, data efficient, and sorted by pagerank to improve recognizability - if that word even exists). With the tradeoff of partially trusting a service provider.
Great article, btw.

2024-09-17 21:05:51 GMT

- reply

Relays do not provide this kind of data aggregation

2024-09-17 21:04:55 GMT

- reply

Yes, completely agree. We want something like this.

2024-09-17 18:37:56 GMT

Thank you for the tough love, fiat 😅
Yes, the "follows who follow" IS a WoT API service - there is no other realistic way to solve this problem.
That said we're slowly working to make this service provider: (a) faster and more stable, (b) a DVM or more likely return a signed nostr message - vs the current plain response-, (c) some client-side verification, (d) allow swapping service providers, once we settle on a standard.
These WoT service providers obviously will compete in a nostr open market.
#nevent1q…6zhy

2024-09-17 18:25:49 GMT

- reply

It is there! But it has an error (no files were published) @nprofile…6e34 do you want to try with zapstore-cli 0.0.5?