HackerReposA FIELD GUIDE TO OPEN SOURCE
ProSponsor the shelf♧ 0
← Back to top all-time
MuntashirAkon
AppManager
Java2020–2025
MuntashirAkon / AppManager

AppManager

A full-featured package manager and viewer for Android

6Distinct people
10Mentions
0Explicit recommenders
9.6KGitHub stars
REPOSITORY AT A GLANCE

What to know before exploring

What it is

A full-featured package manager and viewer for Android

GitHub

Where it is used

No documented product use has been verified yet.

What people are saying

No recommendation phrase was found in the indexed comments.

No classified warning is attached to this page. Read the discussions before treating silence as approval.

Also in these discussions

No other repository is repeatedly linked in the same discussions.

This week on Hacker News

Nov 7–Nov 14 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/14/2026, 3:56:07 PM UTC.

No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.

Mentions over time

HN mentions by year10 dated mentions

Observed mentions: 2020-11-14 21:48:15 UTC to 2025-01-18 12:22:56 UTC.

01232020-01-01 00:00:00 UTC to 2021-01-01 00:00:00 UTC (exclusive): 1 mentions; 0 submissions, 1 comments20202021-01-01 00:00:00 UTC to 2022-01-01 00:00:00 UTC (exclusive): 3 mentions; 1 submissions, 2 comments2022-01-01 00:00:00 UTC to 2023-01-01 00:00:00 UTC (exclusive): 2 mentions; 0 submissions, 2 comments20222023-01-01 00:00:00 UTC to 2024-01-01 00:00:00 UTC (exclusive): 1 mentions; 0 submissions, 1 comments2024-01-01 00:00:00 UTC to 2025-01-01 00:00:00 UTC (exclusive): 2 mentions; 0 submissions, 2 comments2025-01-01 00:00:00 UTC to 2026-01-01 00:00:00 UTC (exclusive): 1 mentions; 0 submissions, 1 comments2025

Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.

View mention counts and date ranges
UTC ranges include their start and exclude their end. Select a period to filter the source evidence.
PeriodStart (UTC)End (exclusive, UTC)MentionsSubmissionsComments
20202020-01-01 00:00:00 UTC2021-01-01 00:00:00 UTC101
20212021-01-01 00:00:00 UTC2022-01-01 00:00:00 UTC312
20222022-01-01 00:00:00 UTC2023-01-01 00:00:00 UTC202
20232023-01-01 00:00:00 UTC2024-01-01 00:00:00 UTC101
20242024-01-01 00:00:00 UTC2025-01-01 00:00:00 UTC202
20252025-01-01 00:00:00 UTC2026-01-01 00:00:00 UTC101

What Hacker News says

10 sources
It is - and there are other ways to make that shortcut appear even without an app. But that app also got nerfed some time ago, and in general, even when file managers can access Android/data, that folder is missing many subdirectories, and most of those that can be seen, are empty. For some reason, you can get at some more files and folders in this structure if you plug the phone to your PC (this is apparently intentional). But none of that gives you access to any of the interesting/useful data applications store, and then applications also have a special super-private folder elsewhere. You can learn that and more through an app like https://github.com/MuntashirAkon/AppManager running in ADB over Wi-Fi mode (no-root).
In Trusting clients is probably a security flaw
avbroot is not officially supported by CalyxOS or GrapheneOS, but it does work with both OSes. The point of avbroot is to make root access available to trusted Android apps while leaving commands such as "fastboot flash" and "fastboot erase" disabled. There will always be a subset of users who prioritize functionality over security. This includes anyone who would root an Android device (and anyone who would use a desktop computer running most distributions of Linux, macOS, or Windows). I'll be glad to reconsider using root on Android if all of the functions of App Manager's "block trackers" feature[1] and Basic Call Recorder[2] were available on Android without root. [1] App Manager: https://github.com/MuntashirAkon/AppManager [2] BCR (Basic Call Recorder): https://github.com/chenxiaolong/BCR
In DNS traffic can leak outside the VPN tunnel on Android
For stuff that can't use fdroid, check out obtainium, it can pull releases directly from GitHub, etc. Shizuku is also useful for background-installing apps via some of the fdroid alternative clients (and some apps like Tachiyomi can use it for extensions and other local-adb things), as is App Manager for background-installing apps via local adb. https://github.com/ImranR98/Obtainium https://github.com/RikkaApps/Shizuku https://github.com/MuntashirAkon/AppManager
In The Samsung Galaxy S23’s bloated Android build somehow uses 60GB of storage
Adding to the list of things that you can do with root on Android: - App Manager[1] has a powerful feature that lets you disable trackers in every single app on the device. (Menu > 1-Click Ops > Block/unblock trackers) - Neo Backup[2] is the most comprehensive backup app on Android, with automatic scheduling. It lets you back up and restore anything you want, including app data that the developer labeled "no_backup". - Install and upgrade apps from third-party app stores without needing to manually confirm each installation. Extremely useful for Aurora Store[3] and Neo Store.[4] - Universal SafetyNet Fix,[5] combined with MagiskHide Props Config[6] and Magisk,[7] allows you to spoof SafetyNet on your device to improve compatibility with apps that check for it, including some banking apps, commerce apps, and games. > trusting Magisk, going
Read the rest
without Clockwork Mod on many platforms, eschewing security updates I have no problem trusting Magisk[7] as a free and open source Android rooting solution. ClockworkMod Recovery has been discontinued for years. The most advanced Android recovery is TWRP,[8] and TWRP is not needed to root the device with Magisk. I don't know what you mean by "eschewing security updates" since rooting Android does not prevent you from receiving security updates. [1] App Manager: https://github.com/MuntashirAkon/AppManager [2] Neo Backup: https://github.com/NeoApplications/Neo-Backup [3] Aurora Store: https://f-droid.org/en/packages/com.aurora.store/ [4] Neo Store: https://github.com/NeoApplications/Neo-Store [5] Universal SafetyNet Fix: https://github.com/kdrag0n/safetynet-fix [6] MagiskHide Props Config: https://github.com/Magisk-Modules-Repo/MagiskHidePropsConf [7] Magisk: https://github.com/topjohnwu/Magisk [8] TWRP: https://twrp.me/
In LineageOS 20
It depends on how the developer chooses to implement the notifications and on how the app is distributed. The Play Store distribution of Signal uses Firebase Cloud Messaging (via Google Play Services or microG) and falls back to WebSockets if FCM is unavailable. The website distribution[1] of Signal only uses WebSockets. I don't think Signal tries to detect whether the phone is Chinese, only whether FCM is available. Since Google services (including FCM) are blocked in China, apps that serve both Chinese and non-Chinese users usually find some way to support both FCM and the Chinese equivalents. For example, Airbnb serves users both inside and outside of China, so they distribute two builds of their app. The Play Store distribution of Airbnb relies solely on FCM for push notifications. The Chinese distribution of Airbnb,[2] according to a
Read the rest
n App Manager[3] tracker scan, bundles push notification libraries from JPush,[4] Xiaomi, Huawei, and Vivo. Developers can choose to have one app distribution that support all of these services, or they can release separate builds that each handle some of these services. This varies from app to app. [1] https://signal.org/android/apk/ [2] Visit https://www.airbnb.cn on an Android phone and the download banner appears at the bottom. [3] https://github.com/MuntashirAkon/AppManager [4] https://www.jiguang.cn/en/push
In Review of /e/ – Android-based alternative for mobile phones
Tech discussion begins at 14:00. At 21:00 [0] Snowden calls for [developers to build] smartphone tools to let users take control of their devices (wouldn't be for the first time). While a no-root, user-space firewall can only do so much (Daniel Micay will attest to that [1] :), that's what we are building with RethinkDNS (https://github.com/celzero/rethink-app) for Android phones, picking up where WhisperSystems left off [2]. This other complementary Android app (doesn't require root, but does require "developer mode" turned on) I use, gives a lot more control over installed apps and its components (no so much over the device's network itself): https://github.com/MuntashirAkon/AppManager While Google continues to make significant improvements [3], security-focused Android distributions like CalyxOS and Graphene remain the best avenues to
Read the rest
tackle privacy concerns today, but most of the 2B+ Android users don't really want to root devices let alone flash ROMs. Most Chinese OEMs (Vivo, Oppo, OnePlus, Realme, Xiaomi) do bundle in (pretty decent though limited) firewalls but they do not let one visualize or block individual network requests. It'd be quite sometime before the Android/Fuchsia-iOS duopoly is displaced from its perch, but technology-wise, my longer-term hopes are pinned on Linux-based phones (PINE64, Librem) for now. Of course, laws and regulations upholding digital privacy are the real end-game, and it remains to be seen how much headway is made on that front in the coming decade. [0] https://youtu.be/e9yK1QndJSM?t=1261 [1] https://github.com/GrapheneOS/os-issue-tracker/issues/389 [2] https://web.archive.org/web/20110506050715/http://www.whispe... [3] https://security.googleblog.com/search/label/android
In Edward Snowden on privacy and threats to democracy (2019) [video]
Ex-AOSP hacker here. I felt it strongly at the time too that Android didn't need anti-Malware [0] but I don't anymore. Some 5 years ago, I switched to Firefox Mobile out of annoyance because Chrome refused to block all those popups random websites would show with some prompting an app install. Google has since made a lot of improvements including tightening up which apps can install other apps (not a blanket permission anymore), running the Potentially Harmful Applications program, narrowing down fingerprinting (still some way to go as evident by TFA). Google is even locking the code up that runs outside of Android in crosvms [1]. I'm positive, things will improve [2] even if slowly because Android, at this point, is the most widely distributed OS and they can't move as fast anymore without hurting developers and users. Google did impleme
Read the rest
nt what they call AppOps (2013) which paved for tremendous amount of user control over app permissions. They removed AppOps citing that it was never meant to be used by end-users but by AOSP and app developers [3]. Fortunately, if Android is rooted, one can use AppOps [4]; but then rooting exposes one to an incredible amount. Besides, there are LittleSnitch-esque firewalls for both root and non-root devices [5]. [0] https://arstechnica.com/information-technology/2011/11/mobil... [1] https://youtu.be/edqJSzsDRxk [2] https://android-developers.googleblog.com/search/label/Secur... [3] https://www.zdnet.com/article/google-removes-awesome-but-uni... [4] https://github.com/MuntashirAkon/AppManager [5] https://awesomeopensource.com/projects/android/firewall
In Malware on My Android Phone
> #1 things I want to control is app permissions. Android AppManager [0] (if you're willing to spend the time configuring it via the command line) might help here. > If an app "needs" my location, it should get a random spot in the world. If it "needs" my contacts, it should get an empty list. Some Chinese OEMs do have these features. I know ColorOS (Oppo and Realme) does. > If an app "needs" my network, it should see that it's offline. Android 11 natively exposes ability to firewall apps individually. All major Chinese OEMs (Xiaomi, Oppo, Realme, OnePlus, Vivo) have supported this for a long time. > The #2 thing I want to control is data going out. There are two or three no-root firewall solutions on the PlayStore (disclaimer: I built one, too). > #3 is having security updates forever, rather than sudden EOL with no notice. Legacy device
Read the rest
s may have other problems than what an Android distribution can address: https://grapheneos.org/faq#legacy-devices [0] https://github.com/MuntashirAkon/AppManager
In Google sued: Idle Android eats mobile data to send telemetry and preload ads

MAKE YOURSELF AT HOME

A few shortcuts

/
Search the collection
?
Open this guide
Esc
Close dialogs and navigation

Your saved repositories and interests stay in this browser.