Built releases of Alfredo, a native launcher for macOS. The source code is closed; this repository exists for two things:
appcast.xml — the feed it reads to learn a new version exists.The feed is served at https://alfredo-updates.bookoff.me/appcast.xml.
The app downloads updates without authentication, so the files have to be reachable without it.
This costs nothing in security: every entry in appcast.xml carries an EdDSA
signature, and the public key is embedded in the app. Without the private key an
archive cannot be swapped — the app simply refuses to install it. The update
host does not need to be trusted.
GitHub attaches a source archive to every release automatically, and there is no way to turn that off. Those archives contain this repository — a README, a CNAME file and the appcast, under a kilobyte in total. Alfredo’s own source is not here and is not published.
Grab the latest DMG from Releases and drag Alfredo into Applications. It updates itself from there.