🍌 BananaPeel

Install apps that other people share — and virus-scan every one before it touches your computer.

npm install -g @blockblock2/bananapeel
bananapeel key <your-cloudmersive-api-key>   # free at portal.cloudmersive.com
bananapeel install blockblock2/snake
bananapeel run snake

Commands

| Command | What it does | | --- | --- | | bananapeel install owner/repo[@ref] | Download, virus-scan, then install (-y skips the prompt) | | bananapeel run <app> | Run it (.html opens in your browser, .js runs with Node) | | bananapeel list | Show installed apps | | bananapeel info owner/repo | Peek at an app before installing | | bananapeel uninstall <app> | Remove it | | bananapeel scan <file> | Virus-scan any file | | bananapeel init | Make a bananapeel.json so you can share your app |

Apps on your computer

Every app you install also shows up like a normal app:

• Mac: in ~/Applications, so Spotlight (⌘ Space) and Launchpad find it. HTML apps open in their own window.
• Windows: in the Start menu under BananaPeel. HTML apps open in their own window using Microsoft Edge.

Use "width" and "height" in bananapeel.json to set the window size. Add "title" and "icon": "icon.png" to bananapeel.json to set its name and icon. Use --no-app to skip this.

Sharing your own app

1. In your app folder, run bananapeel init. It makes:

   { "name": "snake", "version": "1.0.0", "description": "Classic snake", "main": "index.html" }

2. Push the folder to a public GitHub repo.
3. Tell people: bananapeel install your-username/your-repo

How the safety check works

1. BananaPeel downloads the app as a zip from GitHub.
2. The whole zip is sent to the Cloudmersive Virus Scan API (POST /virus/scan/file).
3. If anything is found — or the scan can't run at all — the app is not installed.
4. The zip is unpacked into ~/.bananapeel/apps/<name>, and any file that tries to escape that folder is rejected.

A virus scan catches known malware. It can't tell if someone wrote a brand-new sneaky script, so only install apps from people you trust.