What does closed source mean?
Closed source software keeps its source code private and ships only the built program. You can run it, but you cannot read the code that produced it. It is the opposite of open source.
Why it matters
With closed source, trust has to come from other evidence. Reading the code is not an option, so you check what the program does from outside. Closed source is common for commercial Mac apps, and it is not a sign of anything wrong. The price is that the checks are yours to run.
NotchStar is closed source
The NotchStar repository is private, so you cannot read the code. The safety guide says so plainly and lists checks you can run instead:
- Verify the signature with
spctl -a -vv /Applications/NotchStar.app. A notarized app answersacceptedwith the sourceNotarized Developer ID. - Compare the download against the published SHA256 checksum on the install page.
- Watch the app’s network connections with a monitor such as Little Snitch. The privacy page says the app contacts no server during the free trial.
- Read the privacy page for what is sent if you opt in to anonymous version info.
One part of the app is open source: MediaRemoteAdapter, a BSD 3 clause project credited in its notices.
Related
Read is NotchStar safe and the notch app privacy checklist to run the same checks on any notch app.
