Is Gitling safe?

Gitling is a Git client for Android, built with Jetpack Compose and Material 3 Expressive. It's a fork of MGit (itself a continuation of SGit), modernized with a current Android toolchain, a from-scratch Compose UI, one-tap GitHub sign-in, and a new identity. Features: Clone, create, and delete local repositories One-tap Connect with GitHub (OAuth Device Flow) -- no manual token/password handling…

Developer: Maneesha Cooray
Category: Code & Forge
Earliest archived version: 10 Aug 2026
License: GPL-3.0-or-later (per F-Droid metadata)

02 / Release notes

Release notes from F-Droid

02 Oct 2026

1.0.62

Tap the Files path bar to jump straight to a folder (thanks BugeStudioTeam). Drag and drop text from other apps into any text field. Fixed crashes when renaming a branch or tag and when searching commits quickly. Fixed the commit author suggestions interrupting typing. Clearer error when…

Full notes →

23 Sept 2026

1.0.61

Updated a core security library to include upstream compatibility improvements for newer Android devices with 16 KB memory pages.

Full notes →

10 Aug 2026

1.0.59

Your repos now show up as a "Gitling" location in the system Files app and any file picker, so other apps can browse and edit them directly.

Full notes →

03 / Package identity

Technical fingerprint

Application IDcom.maneeshacooray.gitling

Latest APK SHA-25661b894db899e18fec2001d717945000f42ded4419cab0e54ceb1e91230d141be

Signing certificateB1:86:85:05:E3:13:BC:8B:53:4D:0B:D0:9A:E1:1B:72:F4:C8:1A:28:A4:A0:B8:97:25:66:B3:60:FD:39:B4:E1

MIN ANDROID23TARGET37ARCHITECTUREarm64-v8a · armeabi-v7a · x86 · x86_64

04 / History

Archive history

3 versions in WIKI archive: earliest 1.0.59 (10 Aug 2026), latest 1.0.62 (02 Oct 2026).

No change in android.permission.* between 1.0.61 and 1.0.62.

05 / Version archive

Documented releases

3 TOTAL

VersionReleasedAndroidArchitecture

1.0.6202 Oct 202623+arm64-v8a, armeabi-v7a, x86, x86_64→1.0.6123 Sept 202623+arm64-v8a, armeabi-v7a, x86, x86_64→1.0.5910 Aug 202623+arm64-v8a, armeabi-v7a, x86, x86_64→

06 / Safety & access

Safety verdict

Authentic — file hash matches the source indexNo ads or tracking flagged by the source

IntegritySHA-256 verified vs source

SourceOpen-source · fdroid

Permissions8 declared · 2 sensitive

Signaturepresent

Anti-featuresNo known anti-features

Sensitive accessREAD_EXTERNAL_STORAGEREAD_MEDIA_IMAGES

Declared permissions

android.permission.ACCESS_NETWORK_STATE android.permission.FOREGROUND_SERVICE android.permission.INTERNET android.permission.READ_EXTERNAL_STORAGE android.permission.READ_MEDIA_IMAGES android.permission.RECEIVE_BOOT_COMPLETED android.permission.WAKE_LOCK com.maneeshacooray.gitling.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Tracker status: Not assessed by WIKI for Android.

07 / Sources

Evidence ledger

Each entry is a captured public reference backing this record.

RepositorySource package page↗Source codeSource repository↗