About File Hub
A community-driven hub for custom app packages, mods and extensions. It is built to be private, to cost nothing to run, and to be moderated properly.
What is this service?
File Hub is a place to share and find community-made packages: plugins, themes, configs, templates and mods for the apps listed on the Browse
page. Each package is a single
.json
or
.zip
file (up to 5 MB) with a name, version, description and target app.
- Anyone can browse, preview and download, without an account.
- Members can upload packages, vote them up or down and report problems.
- Preview before you download: JSON files open in a readable view, and ZIP files show their file list (nothing is extracted or run).
Who created it?
File Hub was created by ShowTimeFOX on GitHub as one central place to manage and share custom packages safely, instead of passing files around in chats and forums.
It is community-run: the packages come from their uploaders, and the community helps keep the catalogue clean by voting and reporting.
How it works under the hood
Every part runs on a free tier, so the hub costs nothing to keep online.
Cloudflare Pages
Serves the website itself: plain static pages, delivered from Cloudflare's edge network.
Pages Functions
A small server-side API for sign-up, uploads and downloads. It checks your login and the captcha before anything is stored.
Firebase & Firestore
Firebase Auth handles logins. Firestore stores package details, profiles, votes and reports, guarded by strict security rules.
GitHub Releases
The files themselves live as releases in a public GitHub repository, one release per package.
Privacy & security
- No tracking, no ads. You don't need an account to browse or download.
- Your password is never seen by File Hub. Firebase Auth stores it salted and hashed. You can also log in with Google or GitHub.
- Usernames, not emails. Your public profile shows only your username and your packages.
- Secrets stay on the server. The key that writes to GitHub is only used by the server-side API and never reaches your browser.
- Bots are kept out. Sign-up and every upload need a reCAPTCHA check, verified on the server.
- Files are checked for type and size on upload, and previews never run what's inside.
Moderation
Every package must follow the community rules : no malware, no spam, and only content you have the rights to share.
- Members can report a package from its card's menu (once per package).
- The site owner reviews reports and removes packages that break the rules. Repeat offenders lose their account.
- Votes push useful packages up and bury low-quality ones.
Files are provided as-is by their uploaders. Use the preview, and only open files from sources you trust.