opennavo/OpenNavo

OpenNavo

English · 简体中文 · 日本語 · Español · Português (Brasil) · Русский

The Homebrew app store for Mac

Explore descriptions and release notes for over 7,700 Homebrew Casks,
then install and update in one click with the macOS app. Homebrew handles every step, and every step stays visible.

Website · Browse Apps · Download · Contributing

OpenNavo is a free, open-source Homebrew GUI for Mac: it installs and updates Homebrew apps on your Mac in one click, and its website is a directory of Mac apps with release notes, system requirements and uninstall steps.

Homebrew is a reliable way to install software on a Mac, but the command line isn't for everyone, and brew outdated won't tell you what changed. OpenNavo gives Homebrew Cask an app store interface:

• Web: Browse, search, and compare apps, read release notes for each version, and copy installation commands.
• macOS app: Everything available on the web, plus installation and updates through Homebrew on your own Mac, thorough uninstallation of apps from any source, a careful cleanup of caches and leftovers, a system monitor in the menu bar, and a record of every operation.
• Languages: The website supports ten languages: English, 简体中文, 繁體中文, 日本語, Español, Português (Brasil), Русский, Deutsch, Français, and Italiano. The macOS app and the admin console use six of them: English, 简体中文, 日本語, Español, Português (Brasil), and Русский. App descriptions and release notes are translated automatically, with the original text always available.
• No account required: No sign-up or login. Just open it and start browsing.

opennavo.com runs the code in this repository.

• Discover: Categories, rankings based on real installation counts, editorial picks, and collections.
• Search: English and Chinese names, pinyin, and aliases. For example, weixin finds WeChat, and vscode finds Visual Studio Code. Press ⌘ K from anywhere.
• App details: Descriptions, screenshots, installation counts and release cadence, dependencies and conflicts, installation paths, and uninstall behavior.
• Release notes: A timeline of each version's changes, with the date it was added to Homebrew and a switch between translations and the original.
• Brewfile: Add apps to your list while browsing and generate a Brewfile in one click. Collections can also be exported directly.
• Open in the app: Hand installation over to the macOS app through opennavo:// deep links.

• Install, update, and uninstall in one click: Tasks run in a queue with live progress and the actual brew commands. Inspect logs and retry when a task fails.
• Uninstall apps from any source: Apps from Homebrew, the App Store, disk images, and .pkg installers are listed with their size and when they were last opened. Before anything is removed, you review every related file that was found, such as app data, caches, preferences, background items, and installer receipts. Files go to the Trash by default, so you can undo.
• Clean Up Mac: A read-only scan finds app caches, logs, browser and developer caches, Homebrew downloads and old versions, and files left behind by apps you've already deleted. It also finds old temporary files, installers you no longer need, build output of projects untouched for a month, the Trash, device backups and Xcode archives, and the space Docker can reclaim. Results are grouped by risk: rebuildable files are deleted right away, leftovers and installers go to the Trash so you can undo, and nothing personal is selected for you. Caches of apps that are running are skipped.
• System Monitor: CPU, GPU, memory, disk, network, battery, temperature, and fans at a glance, with charts of the last minute or hour, CPU and GPU power, drive health (SMART), and the processes using the most CPU, memory, disk, or network. Each metric can be its own menu bar item, as many as you like (CPU and memory are on by default), shown as text or a small chart, and clicking one shows its details right below it. Optional alerts tell you when something needs attention. Fan speeds are always shown, and the helper for manual fan control installs with one click, right in the app or from the menu bar. Readings stay in memory on your Mac and are never uploaded or written to disk.
• Update management: Scheduled checks and one-click updates for all apps, with support for apps that update themselves (auto_updates) and pinned apps. You'll be asked for permission before updating an app that's running.
• Local activity: Every installation, update, and uninstallation is recorded and can be exported.
• Get started easily: Detect your Homebrew environment and get help installing it. Switch between mirrors in China with one click: Tsinghua TUNA, USTC, and Alibaba Cloud.
• More: A menu bar app, Brewfile import and export, an offline catalog, and updates for OpenNavo itself.

• Manage categories, text in every website language, icons and accent colors, screenshots, editorial picks, collections, terminology, and client announcements.
• Manage release notes and translations, sync jobs, search insights, feedback, client releases, mirrors, and remote configuration. Includes administrators, roles and permissions, and audit logs. Changes can be restored; deleted items go to a recycle bin first.
• Built-in MCP service: AI agents can maintain app content within their granted permissions. All write operations support dry runs.

Discover: categories, popular apps, and recent updates	Details: descriptions, key stats, and installation commands
Release notes: changes in each version and when it was added to Homebrew

The app runs commands on your computer, so clear safety boundaries come first:

• The server never runs brew. Installation, updates, and uninstallation are initiated by the app on your Mac.
• No shell involved: brew is called with an argument array. Package names must pass allowlist validation to prevent command injection.
• Casks only: brew commands targeting a specific app explicitly include --cask. Write operations on Formulae are rejected.
• Careful uninstallation: Apps not installed with Homebrew are removed by OpenNavo itself, which never runs their uninstallers or installer scripts. Related files are matched by bundle ID, App Group, background item, installer receipt, and Homebrew's zap rules. Files that only resemble the app's name, or that other apps also use, are not selected by default. Each path is checked again right before removal, and symbolic links are never followed. Items that need administrator rights are removed in one batch after a single macOS password prompt; Homebrew may ask separately for its own steps. Built-in macOS apps are never listed.
• Careful cleanup: Cleanup only looks at fixed places: cache, log, and developer tool locations, the temporary folder, Downloads and the Desktop, your project folders, the Trash, and device backups, plus leftovers matched by the uninstall rules. Docker's images, build cache, and stopped containers are removed only through Docker's own commands, and its volumes are never offered. Browser history, cookies, passwords, and extensions are never touched, and neither are keychains, password managers, VPN and AI tools, virtual machines, or iCloud Drive. Anything else can be added to a protected list. Each item is checked again right before removal, symbolic links are never followed, and cleanup never asks for administrator rights.
• Careful fan control: Manual fan speeds go through a small helper that accepts only five fixed commands, and only from OpenNavo. Fans are never turned off: speeds stay between the system minimum and maximum. They go back to system control if OpenNavo quits, crashes, or stops responding for 15 seconds, when the Mac sleeps, or when a write fails. Heat never blocks manual control; if the chip stays at 95 °C for 10 seconds, manual fans go to full speed.
• You're in control: Any write operation requested through a web deep link requires your confirmation in the app before it runs.
• No hosting of installers: Downloads come directly from upstream sources or Homebrew. OpenNavo does not handle the installers themselves.

opennavo/
├── apps/
│   ├── web/                Web app (Nuxt 4 SSR)
│   ├── desktop/            macOS app (Tauri 2 · Vue 3 · Rust)
│   ├── admin/              Admin panel (based on soybean-admin v2.2.0)
│   ├── server/             Go backend: public, admin, and Agent APIs; worker
│   └── mcp/                MCP service (Python · FastMCP), calls only the backend Agent API
├── packages/
│   ├── ui/                 Presentation components shared by web and desktop
│   ├── tokens/             Single source of truth for colors, radii, and type sizes
│   ├── shared/             Locale list, error codes, version comparison, and shared logic
│   └── api/                TypeScript types generated from OpenAPI contracts
├── tooling/
│   ├── scripts/
│   ├── config/
│   └── i18n/
├── ops/                Docker Compose, Caddy, Prometheus / Grafana, backup scripts
├── docs/
│   ├── i18n/
│   ├── security/
│   ├── legal/
│   └── design/
└── .github/

The backend syncs the catalog and installation counts from Homebrew's public APIs, reads Homebrew commits to find when each version was added, probes download sizes, and generates offline catalog snapshots for the app. APIs follow a contract-first workflow: update apps/server/api/*.openapi.yaml, then run make gen to generate Go and TypeScript code.

Non-font Casks are automatically marked disabled when the Homebrew commit for their current full version is more than 90 days old. A version change clears this local status until its commit date is checked. Apps with unknown commit dates remain active under this policy, and explicit history-fetch exclusions are respected. Homebrew's own disabled status and manually hidden apps stay independent. The policy runs during catalog sync, including unchanged responses, and disabled entries remain available through Show disabled and installed-app records.

• Node.js 24 and pnpm 10
• Go 1.27 and Rust 1.96.0 (the exact Rust toolchain is pinned in apps/desktop/src-tauri/rust-toolchain.toml)
• Python 3.13 and uv (MCP)
• Docker (local PostgreSQL, Redis, and MinIO)
• macOS 13 or later (desktop app only)

# Check the toolchain and install dependencies
make setup

# Start local infrastructure, run migrations, and load seed data
make infra migrate seed

# Sync the catalog from Homebrew's public API (requires network access)
node tooling/scripts/tasks/server.mjs catalog-sync

# Run each in a separate terminal
make dev-api           # Public and admin APIs    http://localhost:8080
make dev-worker        # Worker: sync, translation, snapshots
make dev-web           # Web app                  http://localhost:3000
make dev-admin         # Admin panel              http://localhost:9527
make dev-desktop       # macOS app (Tauri)

The local admin credentials come from ADMIN_BOOTSTRAP_USERNAME / ADMIN_BOOTSTRAP_PASSWORD in apps/server/.env.example and are for development only. Run make help for all available commands.

For frontend-only work, you can use mocks without starting the backend: make mock serves Prism mocks from the OpenAPI contracts (public API on 4010, admin API on 4011). Start the frontend with MOCK=1 make dev-web or MOCK=1 make dev-admin. make dev-desktop-web runs the desktop interface in a browser, replacing system calls with mocks.

• apps/server/.env.example lists all backend environment variables and local defaults. Put local secrets, such as API keys, in the Git-ignored apps/server/.env.local; the backend reads it automatically at startup. Explicit process environment takes precedence over .env.local, which takes precedence over nonempty .env.example defaults in development commands.
• Content translation is disabled by default. Enable it in System → Translation AI Settings in the admin panel by entering the URL, key, and model for any OpenAI-compatible API. If the admin settings are not configured, the backend falls back to LLM_BASE_URL (default: https://api.openai.com/v1), LLM_API_KEY, and LLM_MODEL.
• When APP_ENV is staging or prod, the backend rejects the example secrets in .env.example to prevent deployment with public defaults.

make lint test

Includes OpenAPI validation, static checks and unit tests for Go / TypeScript / Rust / Python, and completeness checks for every interface language (ten on the website, six in the macOS app and admin). Browser end-to-end tests are available through make e2e.

Production deployment starts with ops/docker-compose.prod.yml: two API replicas, two web replicas, a worker, Redis, and Caddy. PostgreSQL (local-db), Prometheus / Grafana / asynqmon (monitoring), and daily backups (backup) are enabled through optional profiles.

Follow the deployment guide for copyable image builds, external COMPOSE_ENV_FILES, database and S3 initialization, backup/restore, profiles, and upgrades.

Issues and pull requests are welcome. See CONTRIBUTING.md for the complete workflow. Before you start:

• Contracts first: Change apps/server/api/*.openapi.yaml before implementation and run make gen. Do not edit generated files by hand.
• Design tokens: Use packages/tokens/tokens.json for colors, radii, and other tokens. Do not hardcode colors in components.
• Database: Add new migration files; do not modify existing migrations.
• Text: Put all user-facing text in locale files and provide every language of that surface: ten for the website, six for the macOS app and admin. make lint checks completeness.
• Commit messages: Follow Conventional Commits, for example feat(desktop): … or fix(server): ….
• Ensure make lint test passes before committing.

Report vulnerabilities privately to admin@opennavo.com. See SECURITY.md for supported versions and the optional GitHub private reporting channel. Do not open a public vulnerability issue.

This project is open source under the GNU General Public License version 3 only (GPL-3.0-only). Versions published at commit 5fa4056 and earlier remain available under Apache-2.0. Third-party notices and the additional terms below are in NOTICE; dependency evidence and distribution instructions are in THIRD_PARTY.md.

Under the additional terms in NOTICE pursuant to GPLv3 section 7(e), no trademark rights to the OpenNavo name or logo are granted. Under section 7(c), distributed modified versions must be clearly distinguished from the original: use a different name and icon, and replace the app’s Bundle ID, updater public key and update URL. Preserve accurate attribution. Homebrew is a trademark of the Homebrew project; OpenNavo is not affiliated with Homebrew. App names and icons belong to their respective owners.