Package Manager

Package Manager by SmartPack is an open-source Android package utility. It combines a detailed installed-app list with APK export and installation, while placing operations that need package-manager privileges behind optional root or Shizuku access.

This page covers F-Droid’s v8.0 build. We matched the 2.9 MB APK to F-Droid’s signed index, inspected its manifest and checked the fixed v8.0 source tag. We did not execute its root or Shizuku commands on a phone; the descriptions below come from the tagged source and documented command paths.

Inspect and export installed packages

The app separates user and system packages and can display the application label, package name, APK path, install and update dates, data and native-library paths. Its detail views include requested permissions, manifest entries and signing-certificate information. You can launch a package or open its store listing where available. Without root or Shizuku, uninstalling a normal user app goes through Android’s confirmation prompt.

Export copies an installed package into a file you can keep. It supports ordinary single APKs and split-package output; an export is not the same as a full backup. It does not include an app’s private data, accounts or settings, and a protected or split package may not be portable to every device.

Install APKs and split bundles

Package Manager recognises .apk plus common bundle containers such as .apks, .apkm and .xapk. It extracts the full container, preselects the splits it considers compatible with the device, and lets you change that selection before installation. The ordinary path uses Android’s installer session and confirmation; Android must allow this app as an installation source, and signature, version and device-compatibility rules still apply.

The APK-content explorer is labelled experimental upstream. Treat it as a way to inspect archives, not as proof that a modified archive will install or behave safely.

Root and Shizuku operations

With root or an authorised Shizuku UserService, the app can issue Android shell package commands. These include disabling or re-enabling packages, clearing another app’s data, changing selected permissions or app operations, and uninstalling selected user or system packages for the current Android user without the ordinary per-app system prompt.

The distinction matters: uninstall for user does not delete an APK from the system partition. The source uses pm uninstall --user, and its restore path uses cmd package install-existing. Disable uses pm disable-user --user. The command affects only the current Android user; other user profiles are separate, while a firmware update or factory reset can restore the current user’s preinstalled package state.

These controls can break the launcher, System UI, setup, networking or updates if used against a dependency. Shizuku is not a harmless convenience permission; its service can run shell commands with ADB-level authority. Inspect the exact package name, export anything important and avoid copying debloat lists for a different device model.

Offline design and permissions

The measured APK has no internet permission, and our scan found no tracker SDKs. Its eight declarations cover package visibility, requesting installs and deletes, legacy external storage, an old launcher-shortcut interface, optional Shizuku and Android’s generated receiver permission. Newer Android versions mediate or ignore several legacy permissions according to the platform version.

Version v8.0 modernises the interface with bottom-sheet dialogs, swipe navigation and a revised sorting menu. It also adds search inside Permissions and AppOps, introduces new exported-APK naming options, fixes an APK-picker button overlap and updates translations. The release notes do not claim new privileged package commands.

About this file

• This is F-Droid’s source build of v8.0, signed with F-Droid’s key. A differently signed build cannot update it in place.
• The 2.9 MB APK needs Android 7.0 or later and has no native libraries, so it is not limited to one CPU architecture.
• It has no internet permission; package inspection and management are local, although Android’s own installer or store screens may independently use the network.
• Its measured SHA-256 is 6e325c0137d7eecaf10c0f88b83691c3f2cccadeb208406cfc1abb7756b89013, matching the signed F-Droid index.
• Package Manager is licensed under GPL-3.0 or later.

Shizuku API. Uses the Shizuku API, so it can do ADB-level work without root once Shizuku is running. (rikka.shizuku.ShizukuProvider)

Versions currently kept in the F-Droid repository. We host and check only the newest one. Full changelog.