{"id":21108056,"url":"https://github.com/jaybrown/superbackeddownloader","last_synced_at":"2026-04-14T04:31:54.488Z","repository":{"id":134387347,"uuid":"583947685","full_name":"JayBrown/SuperbackedDownloader","owner":"JayBrown","description":"macOS shell script and LaunchAgent to automatically download and verify Superbacked updates and auxiliary files","archived":false,"fork":false,"pushed_at":"2023-01-31T17:29:06.000Z","size":81,"stargazers_count":0,"open_issues_count":1,"forks_count":0,"subscribers_count":2,"default_branch":"main","last_synced_at":"2025-07-06T23:38:28.143Z","etag":null,"topics":["backup","bip39","bitcoin","blockcrypt","btc","crypto","cryptography","linux","macos","master-password","mnemonic","plausible-deniability","qr-code","secret","seed-phrase","shamir-secret-sharing","succession","superbacked","tails","totp"],"latest_commit_sha":null,"homepage":"","language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/JayBrown.png","metadata":{"files":{"readme":"README","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2022-12-31T15:36:43.000Z","updated_at":"2023-01-08T13:33:57.000Z","dependencies_parsed_at":null,"dependency_job_id":"c3fc69e0-83bc-4016-be92-afebfb1d39f0","html_url":"https://github.com/JayBrown/SuperbackedDownloader","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/JayBrown/SuperbackedDownloader","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/JayBrown%2FSuperbackedDownloader","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/JayBrown%2FSuperbackedDownloader/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/JayBrown%2FSuperbackedDownloader/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/JayBrown%2FSuperbackedDownloader/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/JayBrown","download_url":"https://codeload.github.com/JayBrown/SuperbackedDownloader/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/JayBrown%2FSuperbackedDownloader/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":31782736,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-04-14T02:24:21.117Z","status":"ssl_error","status_checked_at":"2026-04-14T02:24:20.627Z","response_time":153,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["backup","bip39","bitcoin","blockcrypt","btc","crypto","cryptography","linux","macos","master-password","mnemonic","plausible-deniability","qr-code","secret","seed-phrase","shamir-secret-sharing","succession","superbacked","tails","totp"],"created_at":"2024-11-20T00:44:39.768Z","updated_at":"2026-04-14T04:31:54.474Z","avatar_url":"https://github.com/JayBrown.png","language":"Shell","funding_links":[],"categories":[],"sub_categories":[],"readme":"Superbacked Downloader (sbdl)\n\nmacOS shell script and LaunchAgent to automatically download and verify Superbacked updates and auxiliary files\n\nCurrent version: 0.7.0\n\nSUPERBACKED INFORMATION\n\nSuperbacked website: https://superbacked.com/\nSuperbacked on GitHub: https://github.com/superbacked/superbacked\nSuperbacked developer on GitHub: https://github.com/sunknudsen\nDeveloper GPG public key fingerprint: E786 274B C92B 47C2 3C1C F44B 8C9C A674 C47C A060\n\nNOTES\n\nFor Superbacked Downloader to work, the Superbacked application itself needs to be installed on the same Mac as Superbacked Downloader. If Superbacked is not installed, Superbacked Downloader will just download the latest release over and over again.\n\nIf you are using your main instance of Superbacked on an air-gapped or factory-reset Mac, you should run this script/agent on your daily-driver Mac containing a placeholder installation of Superbacked.\n\nWhen a new update has been released, the shell script will download and verify the following files:\n\n* GPG .asc signature file for the checksums file (download only)\n* SHA256 hashes file\n* release notes (.txt)\n* main distribution file (macOS DMG or Linux AppImage)\n* Superbacked application (verification \u0026 macOS .app only)\n\nSECURITY NOTES\n\nDON'T TRUST, VERIFY! Superbacked Downloader is set up to automatically verify the SHA-256 hashes file using the GPG signature file and the developer's GPG public key, and then verify all downloaded files using the SHA-256 hashes. It will also verify the internal checksum of the distribution DMG as well as the code signature integrity of the macOS .app bundle. Please be mindful that all this amounts to convenience over security, so it would be wise to always manually verify the downloads yourself.\n\nSCRIPT INSTALLATION\n\n* download or clone this repository\n* `chmod +x ./sbdl` (if necessary)\n* downloaded repo: `cp ./sbdl /usr/local/bin/sbdl` (use sudo if you receive a permissions error)\n* cloned repo: `ln -s ./sbdl /usr/local/bin/sbdl` (use sudo if you receive a permissions error)\n* if you use a different path, you need to modify the agent's plist file accordingly (see below)\n\nVERIFICATION\n\n* cosign public key: https://github.com/JayBrown/JayBrown-github.com-cosign-public-key\n* `cosign verify-blob --signature ./sbdl.cosign.sig --key \"$HOME/.cosign/JayBrown@github.com.cosign.pub\" ./sbdl`\n\nAGENT MODIFICATION\n\n* rename file: replace '$USER' with your local macOS user name, i.e. with the output of `id -un` or of `echo $USER`\n* open the agent's plist file in a text editor\n* replace all instances of '$USER' with your local macOS user name\n* OPTIONAL: modify the 'Program' key if you have installed the script into a different path than /usr/local/bin\n* OPTIONAL: modify the 'StartInterval' key to execute sbdl more often, e.g. '14400' for every 4 hours\n* save \u0026 close\n\nAGENT INSTALLATION\n\n* `cp ./local.$USER.sbdl.plist ~/Library/LaunchAgents/local.$USER.sbdl.plist`\n* `launchctl load ~/Library/LaunchAgents/local.$USER.sbdl.plist`\n* `launchctl start local.$USER.sbdl.plist`\n\nFILES CREATED\n\n(1) Log: ~/Library/Logs/local.$USER.sbdl.log\n(2a) Configuration directory: ~/Library/Application Support/SuperbackedDownloader\n(2b) Configuration file: ~/Library/Application Support/SuperbackedDownloader/sbdl.cfg\n(3) stdout \u0026 stderr created by the agent in /tmp\n(4) SBDL_DISCLAIMER.txt in the user's downloads directory\n\nERROR AT FIRST RUN\n\nThe initial run of the LaunchAgent will fail with an error, because the configuration file is still missing your personal software license key. You need to enter your license key manually. (The script will automatically open the configuration folder in Finder.)\n\nMANDATORY CONFIGURATION\n\n* please import the developer's public key (see above) into your GPG keyring (or the GUI-based GPG Keychain)\n* open the file sbdl.cfg in a text editor\n* License: replace '\u003cyourLicenseKey\u003e' with your actual Superbacked software license key which you received from the developer after purchase\n* save \u0026 close\n\nOPTIONAL CONFIGURATION\n\n* open the file sbdl.cfg in a text editor\n* DownloadPath: enter a download directory (full path) to avoid downloading to ~/Downloads\n* LinuxDownload: enter 'y' or 'yes' etc. to additionally download the Linux AppImage\n* ReleaseLabel: enter 'op' as the software label if you are not using the default 'std' release\n* Platform (Linux only): enter 'x64' or 'arm64' (defaults to 'x64')\n* save \u0026 close\n\nMANDATORY DEPENDENCIES\n\n* gpg: install e.g. with Homebrew or MacPorts etc. (gnupg), or as part of the GPG Suite: https://gpgtools.org\nNOTE: if you have not installed gpg, Superbacked Downloader will still work and download all related files and updates, but you will receive verification warnings.\n\nOPTIONAL DEPENDENCIES\n\n* lynx: install e.g. with Homebrew or MacPorts etc.\nNOTE: slightly more efficient than macOS' built-in cURL for extracting the latest version number from Superbacked's GitHub repo\n* 7z: install e.g. with Homebrew or MacPorts etc. (p7zip)\nNOTE: the 7z command is only used to coarsely verify the integrity of an already downloaded Linux AppImage\n\nDISCLAIMER\n\nSUPERBACKED DOWNLOADER ('THE SOFTWARE') IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, ESPECIALLY LOST OR STOLEN SECRETS AND ASSOCIATED DATA OR VALUE, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjaybrown%2Fsuperbackeddownloader","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fjaybrown%2Fsuperbackeddownloader","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fjaybrown%2Fsuperbackeddownloader/lists"}