This release adds package security scanning and expands what Cleanton can reclaim.
New
- Security tab. Cleanton scans the npm, pip, and editor-extension packages installed on your Mac for supply-chain attacks: token-stealing install scripts, code that contacts unknown servers, typosquatted names, and self-spreading npm worms. The first scan learns what is normal for your machine, and after that Cleanton only warns about packages that are new or have changed. A package that changes on disk without a new version number is treated as a strong warning, because that is how a compromised update hides. Cleanton reads package code without running it, and it only reports. It never removes or changes a package, and it shows you the exact command to remove or reinstall anything it flags.
- Time Machine snapshots. Reclaim the space held by local Time Machine snapshots, which macOS keeps on your startup disk and which can quietly hold many gigabytes. Because macOS manages them, Cleanton removes them with Apple's own tool after you confirm, and unlike everything else they do not go to the Trash. Cleanton says so plainly before you act.
- More to clean. Added everyday-app caches (Chrome and other browsers, Adobe media caches, Steam shader caches, Zoom, and old iPhone and iPad backups) and more developer caches, for 130 built-in cleanup rules in total.
- A safety read on every item. An on-device model labels each cleanup candidate, so anything unusual stands out while you review the plan.
Download
- App (recommended):
cleanton-app-macos-arm64.tar.gz. Signed with the Olib AI Apple Developer ID and notarized by Apple, so it opens without a Gatekeeper override. Extract it and moveCleanton.appto your Applications folder. - Command-line tool:
cleanton-cli-macos-arm64.tar.gz, or install it with the one-line script in the README. The command-line tool ships on its own rather than inside the notarized app bundle, so macOS quarantines it on direct download. The installer script clears that for you; if you download it by hand, runxattr -d com.apple.quarantine ./cleantononce before the first launch.
Apple Silicon (arm64) only. Read the safety guide and the plan before you run anything. Removed items go to the Trash by default.
Checksums
SHA256SUMS is attached.