The latest articles on DEV Community by Droncito (@dron4e6h1u). https://dev.to/dron4e6h1u https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F4164734%2Fb447da11-624d-4f13-b61d-44d648bb8616.png https://dev.to/dron4e6h1u en Droncito Mon, 05 Oct 2026 18:57:41 +0000 https://dev.to/dron4e6h1u/i-built-an-open-source-tool-that-turns-websites-into-android-apps-5gan https://dev.to/dron4e6h1u/i-built-an-open-source-tool-that-turns-websites-into-android-apps-5gan <h1> I Built an Open-Source Tool That Turns Websites Into Android Apps </h1> <p>Hey everyone!</p> <p>I’ve been working on a project called <strong>InteeBuild</strong>.</p> <p>The idea is pretty simple:</p> <blockquote> <p>Give it a public website or HTML and get an Android project/APK/AAB without having to manually set everything up.</p> </blockquote> <p>GitHub:<br> <a href="https://github.com/Fluxionics/InteeBuild" rel="noopener noreferrer">https://github.com/Fluxionics/InteeBuild</a></p> <h2> What can it do? </h2> <p>InteeBuild currently supports things like:</p> <ul> <li>Website → Android app</li> <li>HTML → Android app</li> <li>APK / AAB builds</li> <li>Custom app name and package</li> <li>Custom icons</li> <li>Android permissions</li> <li>Background audio</li> <li>Native bridges</li> <li>GitHub Actions builds</li> <li>Build artifacts</li> <li>Build logs</li> <li>API access</li> <li>Webhooks</li> <li>APK inspection/decompilation</li> <li>Security checks for URLs and webhooks</li> </ul> <p>One of the parts I spent the most time on was the permission system.</p> <p>Instead of simply adding permissions to the manifest, InteeBuild keeps information about whether a permission requires runtime access, special Android settings, dependencies, minimum SDK versions, etc.</p> <h2> Security </h2> <p>Since the server can receive URLs and APK files, I also added protections against things like:</p> <ul> <li>SSRF</li> <li>localhost/private IP access</li> <li>cloud metadata endpoints</li> <li>malicious ZIP/APK structures</li> <li>oversized inputs</li> <li>API abuse</li> <li>invalid webhooks</li> <li>rate-limit abuse</li> </ul> <p>There are also automated tests for many of these cases.</p> <h2> Why did I make it? </h2> <p>I wanted something that could take a website and make the Android side much less annoying.</p> <p>There are already many tools that do something similar, but I wanted InteeBuild to be more transparent about what is actually generated and what still requires native implementation.</p> <p>For example, adding a permission to Android's manifest doesn't magically make the website capable of using that hardware.</p> <p>So the project tries to distinguish between:</p> <p><code>declared → supported → generated → actually usable</code></p> <h2> What's next? </h2> <p>Right now I'm focusing more on stability and security instead of just adding more features.</p> <p>I want the core pipeline to be reliable:</p> <p><strong>URL/HTML → Analyze → Configure → Audit → Build → APK/AAB</strong></p> <p>I'd love to hear feedback from other developers.</p> <p>GitHub:</p> <p><a href="https://github.com/Fluxionics/InteeBuild" rel="noopener noreferrer">https://github.com/Fluxionics/InteeBuild</a></p> <p><strong>What would you improve or add to a tool like this?</strong></p> android opensource webdev javascript