WyStore

Wy Store is an independent alternative client for the RuStore catalogue. It reads the same public pages that the rustore.ru site serves, but installs apps through Android's own package installer. It requires neither an account nor the RuStore client to be present. The project is not affiliated with RuStore, is not endorsed by it, and does not act on its behalf; RuStore is a data source here, not a partner. GitHub releases serve as a secondary source, which is how Wy Store also covers content that RuStore does not carry.

The catalogue and curated sections are aimed at users in Russia, so most of the content displayed is in Russian; the interface itself is available in both Russian and English.

What it does

Two sources, one list: RuStore listings and a built-in catalogue of GitHub projects appear side by side in search results and on the home screen, each labelled with its source. Any public GitHub repository can be added by URL; releases are selected according to policy, so rolling nightly tags and releases without an installable APK are skipped rather than offered.

Verification before installation: every downloaded APK set is checked for a single base APK, a consistent package name and version code across splits, a readable signature, and — when the app is already installed — the same signing certificate and a version code that actually moves forward. Any set that fails these checks is rejected with a clear reason and is not installed.

A queue that survives a reboot: the download queue lives in a database, not in memory. A download interrupted by a reboot, a killed process, or a lost network connection resumes from where it stopped using an HTTP range request, rather than starting over. Failures are recorded with a typed reason instead of an exception message.

Installation on your terms: by default, every installation goes through Android's own confirmation dialog. On a rooted device, silent installation is available, but it is turned off unless you enable it and root access is actually granted.

Fully automatic updates on a rooted device: two switches in Settings close the loop with no interaction required: a periodic check finds an update, downloads it in the background immediately, and installs it silently.

- Download updates in background (root): a discovered update starts downloading automatically. The download respects your chosen network preference: with "Wi-Fi only" it waits for Wi-Fi rather than using mobile data, and with "only while charging" it waits for the charger. - Silent root install: the downloaded and verified update is installed through pm install as root, without the system dialog.

The checks remain unchanged: package name, version code, APK-set completeness, and signature match. A silent install weakens none of them — an APK with a different signature is refused here as well. If root is not actually granted, both switches do nothing: without root, silent installation is impossible, and downloading ahead of time would be pointless because the installation still requires confirmation.

Notifications that stay quiet: at most one notification per category. Twenty updates produce one entry listing them, not twenty; a repeated background check that finds the same updates re-posts silently instead of alerting again; and quiet hours keep everything silent within a window you choose.

Background work that respects the battery: periodic checks run in a flexible window so the system can batch them with other wake-ups, stand down under battery saver, and are not scheduled at all while nothing has been adopted.

It updates itself: Wy Store checks its own releases in this repository and installs them through the same queue, with the same signature check, as any other app.

Security model

- Installation starts only from an explicit press of an install or update button. - Package name, version code, APK-set completeness, and signing certificate are checked before every installation. A signature that does not match the installed copy results in refusal, never a warning. - Downloads are restricted to an allowlist of hosts, with redirects resolved explicitly rather than followed blindly. - Apps installed by Google Play are left alone until the per-app override is switched on. - Verified APKs remain in the app's private storage until the installation is confirmed, and are pruned according to retention and storage limits you control. - No account, no analytics, no advertising SDK, no server owned by the project.

Wy Store verifies distribution. It does not review the applications themselves, and every installation page names the source so responsibility lies with it.

The project hosts nothing: it has no servers, and APKs are downloaded directly from rustore.ru and github.com using links those services publish themselves. The client identifies itself as WyStore/<version> rather than posing as the official one, has no account, and never creates a RuStore User-Token.

Source limitations

The RuStore endpoints the app uses are public web endpoints, not a supported consumer API. The integration is isolated in RuStoreSource, and an upstream change surfaces as a source-format error rather than corrupted data. The client uses a bounded ruStoreVerCode compatibility fallback and never creates or copies a RuStore User-Token. Free, current-version applications are supported.

Requirements

- Android 8.0 (API 26) or newer - Permission to install unknown apps, which Android asks for on the first installation - Root is optional and only needed for silent installation

License

MIT