0x0a / 0x0fHow do I get and run software that no store can pull and no app can abuse?
Sovereign Applications
Apps distributed without a gatekeeper, checked against their author's key, and confined to the access you grant. Nostr-published sites, applets and app stores, peer-to-peer runtimes, local-first data, reproducible builds and capability security.
Start here
Guides
Technologies
Pear: Peer-to-Peer App Runtime
Deep dive
Usable
Zapstore: An Android App Store on Nostr
Deep dive
Usable
Napplets (NIP-5D): Sandboxed Nostr Applets
Deep dive
Experimental
nsite (NIP-5A): Static Websites on Nostr and Blossom
Deep dive
Experimental
Object Capabilities: Spritely Goblins and OCapN
Deep dive
Experimental
Reference and research
Directory17 curated links
Nostr-published apps and sites
- napplet — Composable sandboxed Nostr applets (NIP-5D): a trusted shell brokers signing, relays and storage
- NIP-5D draft — Proposed spec for napplet sandboxing, identity and manifests
- Kehto — Early reference runtime and shell for hosting napplets
- NIP-5A: nsites — Static websites as signed Nostr manifests over Blossom blobs
- nsyte — CLI to deploy, manage and inspect nsites
- nsite-gateway — Self-hostable gateway that serves nsites over HTTP
- NIP-89: application handlers — Discover and recommend apps that handle a given Nostr event kind
App distribution
- Zapstore — Open Android app store with developer-signed releases on Nostr
- F-Droid reproducible builds — How F-Droid verifies that APKs match their published source
- Accrescent — Security-focused Android store with signing-key pinning; alpha
- Obtainium — Install and update Android apps straight from their release pages
- Pear — Holepunch's peer-to-peer runtime for shipping and updating apps over pear:// links
Local-first and peer-to-peer apps
- Local-first software — Ink & Switch essay on apps that keep the primary copy on your device
- Freenet — Peer-to-peer platform running applications as contracts on a small-world network
Capability security and sandboxing
- Spritely Goblins — Distributed object-capability programming for Guile and Racket
- OCapN — Pre-standard object-capability network protocol: CapTP, handoffs, netlayers
- WebAssembly security model — How Wasm modules are sandboxed from their host