The dry version.

Jenni in one sentence.

A self-hosted download server for versioned software releases — as ZIP, with a changelog, a virus-scan badge, anonymous statistics, and a JSON API. Single admin, small, fast, transparent.

She runs in production at jenni.noschmarrn.dev, ships every release of every project in this stack since the start of 2026, and is the source of the JSON your apps poll when they ask "is there a new version?".

Who Jenni is for.

Not for: multi-user SaaS, paid-download marketplaces with checkout, or massive multi-GB binaries. Multi-GB releases work but are not the sweet spot.

What Jenni doesn't do, and why.

Where Jenni fits next to other release tools.

Each of these tools fits a different shape of project. Jenni is the answer when you want one URL per software under your own domain, automated update endpoints across multiple platforms (not only WordPress), and the freedom to add module catalogs or a wp.org bridge without gluing four services together. The other tools win on platform discoverability or built-in edge caching — pick the one that matches what you actually need.

Four shapes of project, one binary.

All four types share the same release table, the same scan pipeline, the same authentication, the same statistics, and the same audit log. The difference is in the public URL shape and the activation rules.

Four states a project can be in.

Status changes are recorded in the audit log. Releases inside any project are soft-deleted — they leave the active release set but stay in the database, recoverable from the admin UI for as long as you want.

What every upload goes through.

1. Magic-byte sniff. The first bytes of the uploaded file must match the ZIP magic. Filename extension is not trusted.
2. Zip-slip protection. Each entry's resolved path must stay inside the extraction root. Symlink and absolute-path entries are rejected.
3. Zip-bomb cap. Total uncompressed size is capped at 500 MB by default. Configurable per-instance.
4. ClamAV scan. Every upload is scanned against the local ClamAV daemon. Strict mode is the default: a scanner error aborts the upload. Scan status (clean / infected / error / unscanned) is part of the public API and the info page.
5. SHA-256 hash. Computed once on disk, returned in the API, displayed on the info page, embeddable in widgets.
6. Atomic activation. A successful upload writes to a versioned directory; activation is a single symlink swap. There is no read/write race on the active release.

Account and transport hardening

• Argon2id for password hashing (argon2-cffi).
• Login rate limit: 5 attempts per minute per IP, including successful logins (defends user enumeration).
• Public route rate limit: 60 GET requests per minute per IP, in-memory sliding window.
• CSRF tokens on every admin form.
• Session cookies: HttpOnly, Secure, SameSite=Lax, signed via itsdangerous.
• HTTPS-only behind a reverse proxy with --proxy-headers.
• WordPress SVN credentials are encrypted at rest with Argon2id-stretched master-password + Fernet. A reset wipes all stored creds.

Container hardening

• Runs as UID 10001, never root.
• read_only: true root filesystem.
• cap_drop: [ALL].
• no-new-privileges security option.
• Writable mounts only for data/ and downloads/.

Daily defence

rescan-all is a CLI command intended to run nightly. It re-checks every existing release against the current ClamAV signature set, so a release that was clean on day one but matches a signature added later flips to infected in the public API the next morning.

What's actually inside the binary.

Sizing, deployment, backup.

Every public endpoint, with response shape.

All endpoints return UTF-8 JSON unless noted otherwise. Timestamps are ISO-8601. Hashes are hex-encoded SHA-256. Base URL throughout: https://jenni.download.

[
  {
    "slug": "breznflow",
    "name": "BreznFlow",
    "description": "Short description",
    "current_version": "1.2.3",
    "size_bytes": 184320,
    "sha256": "abc123…",
    "uploaded_at": "2026-05-09T11:23:00",
    "download_url": "https://jenni.download/breznflow"
  }
]

{
  "slug": "breznflow", "name": "BreznFlow",
  "current_version": "1.2.3",
  "size_bytes": 184320,
  "sha256": "abc123…",
  "uploaded_at": "2026-05-09T11:23:00",
  "download_url": "https://jenni.download/breznflow",
  "changelog": "## 1.2.3\n- Fix: …",
  "changelog_html": "<h2>1.2.3</h2><ul><li>Fix: …</li></ul>",
  "scan_status": "clean",
  "scanner_name": "clamav",
  "scanner_version": "1.4.3",
  "scanned_at": "2026-05-09T11:23:05",
  "scanner_signature_date": "2026-05-09T08:00:00"
}

{
  "version": "1.0.4",
  "size_bytes": 107226,
  "sha256": "d09e7e20442b789a4890beb2a8b2dd23a0adec62030d80a1828d533647eda13e",
  "download_url": "https://jenni.download/breznflow",
  "scan_status": "clean",
  "scanned_at": "2026-05-09T02:03:20",
  "scanner_name": "clamav",
  "scanner_version": "1.4.3",
  "scanner_signature_date": "2026-05-08T08:28:30"
}

{
  "collection": {
    "slug": "schneespur-modules",
    "name": "Schneespur modules",
    "description": "Extensions for the Schneespur app",
    "generated_at": "2026-05-09T11:23:00Z"
  },
  "modules": [
    {
      "slug": "schneespur-export",
      "name": "Export module",
      "description": "GPX/CSV export",
      "current_version": "0.4.1",
      "category": "export",
      "tags": ["gpx", "csv"],
      "image_url": "https://jenni.download/schneespur-export/icon",
      "website_url": "https://example.com/export-module",
      "download_url": "https://jenni.download/schneespur-export",
      "info_url": "https://jenni.download/schneespur-export/info",
      "sha256": "abc123…",
      "size_bytes": 51200,
      "released_at": "2026-05-08T09:00:00Z"
    }
  ]
}

Direct download URLs

These return application/zip, not JSON. Each download increments the anonymous counter.

Embed and info endpoints

What's done, what's still cooking.

Shipped and live

• Phase 1 — MVP. Upload, auth, public download, JSON API.
• Phase 2 — comfort. Statistics, audit log, status-change UI, CSV export, rate limits.
• Phase 3 — embed. Widget, info page, public-side i18n DE/EN.
• Phase 4 — trust. ClamAV pipeline, trust badge.
• Phase 5 — WordPress bridge. Per-plugin SVN settings, master-password-encrypted credentials, pre-flight checks (PHPCompatibility, plugin-check, PHPCS), atomic trunk + tags/ commit.
• Phase 6 — module catalogs. Third project type (module_collection) and fourth (module), ETag-cached JSON catalog at /api/modules/<slug>, icon endpoint with sha256 ETag, cascade-protected deletion.

Still cooking

• Phase 5.3 — wp.org asset workflow (banner, icon, screenshots through the separate SVN assets/ path).
• Self-install packages — the actual open-source release: setup wizard, documented ENV defaults, sample Caddyfile, security CHANGELOG.

Where Jenni stands legally.

Jenni is currently a personal project run in production for the operator's own releases. An open-source release under MIT is planned, gated on the self-install story being good enough for someone who isn't the operator to stand her up in an afternoon.

For now: if you want to run her, talk to me. If you want to evaluate her without running her, the live reference is jenni.noschmarrn.dev and every API endpoint above is reachable there.

Questions, integration ideas, audit notes — info@noschmarrn.dev.