GoodsAppStore.com

GoodsAppStore.com is an Android application store created and programmed by Stan Switaj in September 2026. The store publishes Android software directly from the people who wrote it, as ordinary APK files that a visitor downloads and installs themselves, without an account and without an intermediary application on the phone.

Purpose

The store exists to distribute software outside the established mobile application markets, in the same way that the LinuxDoors AppImage Store distributes desktop software for LinuxDoors. Android has always permitted software to be installed from outside its default market, a practice usually called sideloading, and it requires no modification to the telephone. GoodsAppStore.com is built on that permission rather than around it.

A visitor to the store needs no account, and none is offered. Browsing, searching and downloading are all done without identifying the visitor, on the reasoning that a shop selling a file has no legitimate need to know who is reading its shelves. Prices vary by application and are shown on every listing, with free software marked both as free and as a figure so that nothing is left ambiguous.

Verification

Every listing publishes two values that are unusual for an application store to make public. The first is the SHA-256 checksum of the file itself, which allows a visitor to confirm that the download arrived complete and unaltered. The second is the fingerprint of the [[Public key certificate|certificate]] used to sign the application.

The second value is the more consequential of the two. Android requires every update to an application to carry the same signing key as the version it replaces, and refuses the installation outright when it does not. Publishing that fingerprint therefore allows a reader to establish that each successive version of a program came from the same hands, without taking the store's word for it. Most stores treat this information as internal.

Technology

The site is written in Python 3 and served as CGI through nginx and fcgiwrap, with a PostgreSQL database holding the catalogue. The same arrangement is used by the other websites Switaj programs, including EaglePress and Ultrazon.

The store reads the APK files it is given rather than asking a person to describe them. When an application is added, the store opens the file and extracts the package name, the version, the minimum and target versions of Android, the processor architectures, the file size, the checksum, the signing certificate and the application's own icon. This is done without any Android development tooling: the Android manifest inside an APK is stored as a binary form of XML and is parsed directly, and because release builds rename their internal resources, the icon is resolved through the compiled resource table rather than located by filename. The effect is that the facts shown on a listing are read from the file being offered, and cannot drift away from it through mistyping.

Application files are stored outside the web root and organised by application and by the date of publication, so that older versions remain available rather than being replaced.

First application

The store opened with HTTPSmv, a file server that runs on an Android telephone and is reached from a web browser on a computer over the same wireless network. It was written in Python using Chaquopy and published free of charge.

Installation guidance

Because software from the store is installed outside the default market, the site carries a written guide to the process. It covers the permission Android asks for, which is granted to the browser doing the installing rather than to the application being installed, and which is the step at which most people stop. It also covers the warning shown by Google Play Protect on certified Android devices, which reports that an application is unfamiliar rather than that anything has been found wrong with it, and which conceals the option to continue behind a small link. The guide reproduces the wording of that dialog and shows where the option is found.

See also

• LinuxDoors AppImage Store
• LinuxDoors.com
• Ultrazon
• Stan Switaj