LocalAndroidStore

LocalAndroidStore exists for one reason: when you ship a lot of Android apps from GitHub Releases, sideloading each one through the file manager on every fresh install / re-image is friction. F-Droid won't host private or in-development apps. Obtainium is the closest generic equivalent, but it's not tailored to your catalog or your visual identity.

This is the Android sibling of LocalChromeStore — same idea, same look, different platform.

Why it exists Stock Android won't let you "silent-install" anything unless you're a device-owner / Work Profile admin. Every other app on the device — including this one — has to go through the system PackageInstaller dialog, which the user must confirm. That's by design. What we can do is:

discover every APK release across your GitHub repos, download the latest one and drive PackageInstaller.Session so the system dialog appears once per install, pin the publisher's signing certificate so a silent key swap (repo takeover, MITM) gets blocked instead of installed, show installed-state and update-available status, and give you a one-tap launch / uninstall path. That's what this is.

Features (current) Multi-source GitHub discovery — every enabled GitHub user / org source with a .apk asset on its latest release. Each source has its own enable toggle, optional topic filter, pre-release toggle, and optional PAT. Store-style cards — Catppuccin Mocha on AMOLED black. Repo handle, star count, version tag, status badge, two-line description. Fast catalog search — filter by app name, repo owner / handle, description, tag, version, or package id. Exact hits rank first, with lightweight fuzzy matching for compact names. One-tap install — APK is downloaded to app cache, then driven through PackageInstaller.Session. The system shows its install dialog, the user confirms once, done. One-tap uninstall — fires Intent.ACTION_DELETE, lands on the system uninstall confirmation. Catalog refreshes after. One-tap open — launches the installed app's main activity. APK signature pinning — first successful install captures the signing-cert SHA-256 fingerprint. Future updates that don't match the pin are blocked with a clear "publisher key changed — possible MITM or repo takeover" warning. We never auto-accept a key swap. Developer Verification preflight — when Google verification services are present, installs show a non-blocking advisory before the system install dialog if LocalAndroidStore cannot confirm the APK's package name and signing key are registered for Android Developer Verification. Installed-state detection — PackageManager tells us what's installed; remote versionCode > local flips the badge to "Update available". GitHub PATs (optional) — source-specific tokens bump API rate limits from 60 → 5,000/hr and unlock private repos for that source. Stored in a Tink AEAD-encrypted app-private file, with the keyset protected by the Android Keystore. Activity log + crash log — every download, install, uninstall, and crash is logged in-app and to disk at <app files dir>/logs/crash.log. Async everywhere — the UI never blocks on a download or an API call.