Flowlight 0.9.5

What's new in 0.9.5

• What leaves the Mac, before it leaves. Flowlight asks every app on your Mac to say what it sends and where. The export is the one place Flowlight itself sends anything substantial, and it used to start the moment a switch was flipped. Turning it on now opens a page first: the collector's address, whether the connection is encrypted or whether everything crosses the network readable by anything on the path, exactly the fields your settings will send with a sentence explaining each, and the names of any headers on the request. Header values are never shown — they live in the Keychain, and a screen that printed a token to prove it was being sent would be the thing it warns about.
• Approving one thing does not approve another. The approval is tied to what was disclosed, not to having once agreed: change the collector, switch the host name on, add a header, start sending alerts as well as rollups, and Flowlight stops and asks again, because what leaves is no longer what you agreed to. Rotating a token does not ask again — the value was never part of the disclosure. Switching the export off withdraws the approval, so turning it back on is a fresh decision against whatever the settings say by then.
• The check is where the bytes would leave, not only in the settings screen, so a future screen that forgets to ask cannot send anyway.

Install

Signed with Developer ID and notarized by Apple.

• brew install --cask xinbetween/tap/flowlight
• Flowlight.dmg — drag to Applications.
• Flowlight-0.9.5.pkg — installs to /Applications; offers to quit a running copy first.

macOS 15 or later, Apple silicon and Intel.

Full changelog: https://github.com/xinbetween/flowlight/releases

Checksums

2de8549ebbf1b9d736b51376de6ec309e969a59b536d7aca50fb7b4a4148a01d  Flowlight.dmg
e08ca53919c1eed3edd83d789d733977922d35247b3eca8501d896574bc06051  Flowlight-0.9.5.pkg