Skip to content

GitWorkshop

Install GitWorkshop

Download Zapstore

Download
QR code for zapstore.dev/download
  • Scan the code with your phone’s camera
  • Tap Download anyway if the browser warns about the file
  • Allow your browser to install unknown apps if Android asks
  • Open Zapstore and finish the onboarding

Open GitWorkshop in Zapstore

Open
QR code to open GitWorkshop in Zapstore
  • Scan the code to open GitWorkshop in Zapstore, or search for it there
  • Tap Install, and Download if Zapstore asks you to confirm the developer
  • Confirm in Android’s install dialog. Allow Zapstore to install unknown apps if Android asks

Claimed by the developer

DanConwayDev cryptographically proved they hold the key that signs GitWorkshop. The claim is a signed proof on Nostr, tied to the certificate below.

Developer
DanConwayDev
Developer key
npub15qydau2hjma6ngxkl2cyar74wzyjshvl65za5k5rl69264ar2exs5cyejr
Signing certificate
f9322660fd2507083591367dc93598e888a1cbdd79660e4a96febb00ad8f8c0e
APK checked by
relay.zapstore.devIt read the APK and found it signed with this certificate before listing the release.
Claim published
Jul 14, 2026
Valid until
Jul 14, 2027
Proof event
4a44973ec9a5abb1bdef842e524925f4ddecffb51ab0b8d5df3762e72457b5fdin relay.zapstore.dev
How trust works

GitWorkshop is a Nostr-native client for issues, pull requests, code review, and Git repository exploration.

Built on NIP-34 and GRASP, it keeps repository state on Nostr and fetches Git data from redundant servers on demand—without a central platform.

Zap GitWorkshop

Zapping anonymously. Sign in to zap with your identity.

Sats go to npub15qyda…5cyejr, the developer who signed the app’s certificate proof.

Amount in sats

Stacked in

Latest release

Nov 3, 2026

Claimed app

No privacy and security report for this app yet.

Release notes

Better performance & clearer relay choices

Performance is a major focus of this release: fewer duplicate relay queries, less repeated processing as events arrive, and less redundant downloading of cached history on relays that support reconciliation. Shared loaders, batched list and CI updates, and search indexing only when needed reduce background work while browsing busy repositories. Cached issues and pull requests return with their known statuses before relay refresh, while improved history loading recovers older conversations that relay limits could previously hide.

Public repositories now default to Curated relay views, with clearer source labels and an Expanded option for wider discovery. Switch views without reloading and remember your choice per repository. Refreshed status icons, more readable PR stacks, and better profile loading make ongoing work easier to follow.

The release also brings broad security updates across app dependencies and Android build tools, an Applesauce v7 upgrade, and reproducible Nix-based release workflows that keep Android compilation separate from signing secrets.

Added

  • Remember Curated or Expanded relay choices per repository in this browser, with a Default option that inherits the global repository view setting.

  • Add an opt-in profiling build with relay waterfalls, long-frame observations, and cache timings for isolated performance investigations.

  • Delete software releases you published, optionally including their asset events; the deletion request goes to your outbox, the repository relays, and Zapstore for Android releases.

Changed

  • Patch the Nix npm fallback and its bundled HTTP dependencies while preserving the Node runtime.

  • Update development and CI to pnpm 10.34.9 for package-install security fixes, with explicit esbuild and SWC build-script approvals.

  • Update Android builds to Java 21.0.13 and Gradle 8.14.6, with patched networking, cryptography, archive, XML, and collection dependencies for build tools, lint, and unit-test models.

  • Update CI publication tools to ngit 3.0.4 and Netlify CLI 27.14.2, using patched Nix native libraries for ngit and refreshed Netlify runtime dependencies.

  • Update the GRASP integration fixture to 3.0.9 with refreshed certificate verification and root certificates.

  • Upgrade Vitest to version 4 for patched test-server dependencies and adapt browser-observer mocks to its constructor semantics.

  • Update the Nix development and CI environment to Node.js 24.22.1 with its native security fixes and pinned certificate bundle, align shell pnpm with CI, and refresh the matching Playwright browser tooling. Remove the unsupported Intel macOS shell target; Linux and Apple Silicon targets remain.

  • Restore cached repository items with their known statuses before relay refresh, and cache new collaboration events only after repository-relay confirmation.

  • Default public repository views to relay-confirmed items and discussion, with per-event source labels and a responsive on-page menu for switching between Curated and Expanded relays without reloading. Existing explicit preferences are preserved.

  • Reconcile public repository history with NIP-77 when matching events are cached, fetching missing IDs through shared rate-limit admission and retaining coverage-aware fallback for unsupported relays.

  • Share focused comment, PR-update and CI queries between repository lists and detail pages, preserving immediate loading on direct entry.

  • Share one repository item loader between issue and PR lists, avoiding duplicate root subscriptions while retaining additive maintainer and relay discovery.

  • Reuse event tag-value indexes when dispatching batched loader results, reducing repeated tag scans across subscribers.

  • Build local fuzzy-search indexes only while searching, avoiding indexing work when browsing repositories, issues, and PRs.

  • Coalesce CI workflow grouping during event bursts, preserving the first and latest results while reducing repeated work for PR, commit, and repository checks.

  • Coalesce issue/PR and essentials list rebuilds during event bursts, preserving initial and latest results while limiting repeated UI derivation work.

  • Upgrade to Applesauce v7 with paced, coverage-aware automatic history loading; retain repository fetch ownership, verification policy, and explicit batch-triggered search and notification history using v7 coverage.

  • Run Nostr CI checks, previews, web deployments and Android releases through pinned Nix apps, with Android compilation separated from secret-bearing signing.

  • Use GitHub's Octicons and colour conventions for issue, PR and patch statuses: closed and draft PRs get their own shapes, merged and resolved items are purple instead of pink, and patches share the PR icons.

Fixed

  • Keep page content from shifting sideways when navigating between pages with and without a scrollbar.

  • Keep cached NIP-05 routes available while refreshing expired mappings, including during transient network failures.

  • Update the browser event-cache adapter to remove unused lookup dependencies with upstream security findings, retaining existing cache backend selection and support for legacy injected providers.

  • Update Zod to version 4 with compatible form resolvers for upstream collection-validation security fixes; preserve existing draft and repository-selection schemas.

  • Upgrade React Router to version 7 for current redirect and URL-handling security fixes while retaining the existing declarative routes.

  • Update compatible JavaScript dependencies for upstream security fixes, including Capacitor navigation guards, Vite development-server protections, React Router redirects and fflate ZIP parsing. Refresh affected build-tool dependencies while preserving the Applesauce patch.

  • Load author profiles from configured fallback relays as well as profile indexes, so issue names and avatars can appear without visiting each user's profile page.

  • Remember the five most recently used decrypted private Git service list versions per account and share concurrent decrypt requests to avoid repeated signer prompts after reloads.

  • Preserve slow repository cache restores and load cached statuses before supplemental relay items, avoiding count churn when a warm cache takes more than three seconds to read.

  • Restore cached public repository announcements before relay discovery so warm issue/PR views can load without waiting for network privacy classification.

  • Recover older repository issues and PRs when relays cap the initial root query, including late maintainer coordinates and supplemental relays.

  • Release superseded issue/PR list queries immediately as roots and essentials arrive, avoiding continued processing by obsolete cached models.

  • Release repository-owned item and author-mailbox subscriptions when leaving the repository, while preserving active shared consumers.

  • Avoid repeated broad tag-index scans when opening populated issue/PR timelines with Applesauce v7.

  • Avoid re-querying empty tag history after a successful initial EOSE while keeping live updates active.

  • Remove avoidable per-filter waiting from explicit notification history batches while preserving shared concurrency limits and relay cooldowns.

  • Honour limits on local event-store queries without time bounds through Applesauce v7's query implementation. Existing Android signer restoration, exact-ID deletion and WebSocket recovery fixes remain supplied upstream.

  • Continue repository search history from each completed initial filter response, preserving inclusive timestamp boundaries instead of repeating the first page.

  • Load automatic history beyond relay result caps without treating failed or cancelled pages as exhausted; report saturated timestamp boundaries as incomplete.

  • Automatically continue public repository discovery when a private Git service is unavailable and no private repository evidence exists; avoid labelling unknown repositories private.

  • Show long inferred PR stacks in top-to-bottom columns on wider screens so every title stays readable instead of truncating to fit one row.

Comments

Loading comments…

See more

Get GitWorkshop the private way

Updates checked on your device, and every release verified before it installs.

Get Zapstore for Android

  1. Tap Download APK below.Scan the code with your Android phone’s camera.
  2. If Android asks, allow your browser to install unknown apps.
  3. Open Zapstore and finish the onboarding.
Download APK

v2.0.4 · 71.2 MB · Android 10+

Verify the download

On a computer, run shasum -a 256 <the file you downloaded>. It should print: b13e01319fecf0b3ba1fd60132758bd0fa08a235836c52d44fddb412cf1b7137

If you have zsp, Zapstore’s publishing tool, zsp utils extract-apk <the file you downloaded> works too. Its hash should be the same SHA-256: b13e01319fecf0b3ba1fd60132758bd0fa08a235836c52d44fddb412cf1b7137

On the phone, AppVerifier should show this signing certificate: 99e33b0c2d07e75fcd9df7e40e886646ff667e3aa6648e1a1160b036cf2b9320

Source code All releases and notes

Get zsp

  1. Download the file for your computer.
  2. Make it executable and put it on your PATH.
  3. In your project folder, run zsp.

Have Go? This does the same:

go install github.com/zapstore/zsp/v2/cmd/zsp@latest
macOS, Apple silicon Linux, x86-64 Linux, arm64

v2.0.1 · macOS and Linux

Verify the download

On your computer, run shasum -a 256 <the file you downloaded>. It should print the SHA-256 for the one you chose.

macOS, Apple silicon · 18.6 MB 99018fb9744e5ace2b44557550dc333496239912c0e9b1137266d4922c803346

Linux, x86-64 · 23.8 MB 1ef5373f8ecd9ba63d2c3fab98abb0d31b2244a2aac31b3749fb205c7d5f5b38

Linux, arm64 · 22.1 MB e421005ee47cba58293dce4277bb784e4cfe706dbbcb8617d671629d0238be18

Source code All releases and notes