Fonte

app.fonte
by Turtlecute turtlecute@primal.net

Installs and updates apps straight from their source. Fast, private and minimal.

Fonte keeps the apps that you install from outside an app store up to date. Give it a link to a repository or an app page. Fonte finds the latest release, picks the APK for your phone, checks it and installs it. It is an alternative to Obtainium, with fewer features and a smaller attack surface, and it imports your Obtainium list. Fonte has no native code, no WebView and no dynamic code loading. It runs on GrapheneOS with "Restrict dynamic code loading" on. No trackers, no Google Play Services. - **Sources**: GitHub (also private repositories, with a token), GitLab (also self-hosted), Codeberg, Forgejo and Gitea, F-Droid and IzzyOnDroid. - **The right APK**: the build for your processor, an optional name filter, and pre-releases if you want them. - **Background updates**: a check every 3, 6, 12 or 24 hours. By default, downloads wait for an unmetered network. - **Updates itself**, **share to add**, and **import and export** of Obtainium and Fonte lists.

First release: Oct 31, 2026, 2 total releases.

Most recent release: Nov 2, 2026.

Repo

Appears in 1 app stack.

0 sats / 0 zaps received in the past year.

Sats Received

Underlying data available via MCP: app_zaps, app_releases.

Zap Count

Underlying data available via MCP: app_zaps, app_releases.

Releases

  • Nov 2, 2026 0.1.9
    Fonte now adds apps from other F-Droid repos, for example Tor Browser from the Guardian Project repo. Requires Android 15 or later. The APK has no native code, so it runs on all ABIs. Update from 0.1.8 in place: the signing key is the same. **Changed** - A new source: other F-Droid repos. Give the repo link with its fingerprint, for example `https://guardianproject.info/fdroid/repo?fingerprint=B7C2EEFD…`. Links that start with `fdroidrepos://` and `fdroid.link` links also work. Fonte shows the apps of the repo, and you choose one. A repo with only one app is added at once. - Fonte's own export keeps the repo key, so an import adds these apps again. **Fixed** - No fixes in this release.
    More…
    **Privacy and security** - Fonte refuses a repo link with no fingerprint. It never trusts the first answer of a repo. - Each check reads `entry.jar` (a few KB) and checks its signature with the repo key. Fonte downloads the full index only when it changes (about 0.7 MB for the Guardian Project repo, an estimate). It sends no ETag to these repos. - The APK must match the SHA-256 digest in the signed index at each install, not only at the first one. The pinned certificate of the app still applies. - An Obtainium export does not keep the repo fingerprint, so Fonte skips these entries at import. | File | Use | |---|---| | `Fonte-0.1.9.apk` | Release build, signed. | SHA-256: - `Fonte-0.1.9.apk`: `a71eddc596e50a55bcdf8e9cacd6ded3cd26e29e1a84ecdbe65107a3434a9bc4` Signing certificate SHA-256: `cc:15:4a:2b:16:d1:b2:02:1f:23:37:24:05:49:34:16:2b:f2:98:0e:16:16:72:64:0a:6e:0f:38:8c:36:ff:a4` Check the certificate with `apksigner verify --print-certs Fonte-0.1.9.apk` or with AppVerifier. Do not install an APK with a different certificate.
  • Oct 31, 2026 0.1.8
    Background checks and automatic installs run to the end again, and the APK is smaller. Requires Android 15 or later. The APK has no native code, so it runs on all ABIs. Update from 0.1.7 in place: the signing key is the same. **Changed** - The APK is about 145 KB smaller (2.5 MB, was 2.7 MB). Each self-update download is smaller too. - The library labels, for example "Close sheet", "Dismiss", "On" and "Off", are now in English, the same as all other text in Fonte. Before, TalkBack read these labels in the language of the phone. - In the "Remove" dialog, "Also uninstall the app" is one row. A tap on the label sets the tick, and TalkBack reads the label and the state together. **Fixed**
    More…
    - When your settings are not the default settings, the start of Fonte no longer moves the next background check back by a full interval. It also no longer stops a background check and its automatic installs while they run. - A check after a change to "Include pre-releases" or to the APK name filter now completes when you go back or rotate the phone during the check. Before, Home could offer the release that you just excluded. - A pull-to-refresh now checks all apps when you go back or rotate the phone during the check. - The tick of "Also uninstall the app" stays when you rotate the phone. - A download that Android starts again after it stops Fonte no longer fails with "Not a valid signed APK". **Privacy and security** - An answer with very deep nesting from a self-hosted GitLab or Forgejo server, or in an import file, can no longer crash Fonte. Fonte shows "The source sent an answer that Fonte cannot read" on the app, or "Not an Obtainium or Fonte export" for the import. Before, such an app in the list crashed Fonte at each start and in each background check. - The APK no longer has the version files of its libraries. | File | Use | |---|---| | `Fonte-0.1.8.apk` | Release build, signed. | SHA-256: - `Fonte-0.1.8.apk`: `b55f940f34f8013a675240db30051e0dcc02d685123768b1c5bae3f70f9d94b9` Signing certificate SHA-256: `cc:15:4a:2b:16:d1:b2:02:1f:23:37:24:05:49:34:16:2b:f2:98:0e:16:16:72:64:0a:6e:0f:38:8c:36:ff:a4` Check the certificate with `apksigner verify --print-certs Fonte-0.1.8.apk` or with AppVerifier. Do not install an APK with a different certificate.