App blueprint · 14 Oct 2026

janhq/jan

Jan is an open source alternative to ChatGPT that runs 100% offline on your computer.

Template-written 73 evidence items Apache-2.0REA + LIEF read 3 executables

What this means for you

jan: we inspected its released app without running it.E4

It's open source under the Apache License 2.0 (from its LICENSE file) licence, so anyone can read and check its code.E2
We opened the official download (Jan-Desktop) without running it: 60 web addresses built in, a code signature.E65 E66 E67

What it is

The project describes itself as: “Jan is an open source alternative to ChatGPT that runs 100% offline on your computer.”E1
It's written mainly in Rust.E1
The latest release (v0.8.6) has downloads for Linux, Windows and macOS.E4
44939 people starred it on GitHub; the code was last updated 2026-10-14.E3

Where your data goes

Analytics & trackingCount visits and record what you do on the page. 6

app.posthog.com	PostHog: product analytics and session replay	6×E28
posthog.com	PostHog: product analytics and session replay	4×E7
us.i.posthog.com	PostHog: product analytics and session replay	4×E30
eu-assets.i.posthog.com	PostHog: product analytics and session replay	2×E6
eu.i.posthog.com	PostHog: product analytics and session replay	2×E32
us.posthog.com	PostHog: product analytics and session replay	2×E31

AdvertisingShow ads and follow you across sites to target them. 1

www.facebook.com

Meta / Facebook: Facebook ad tracking

2×E10

AI providersSend text or data to an AI model. 14

api.anthropic.com	Anthropic: AI models (Claude)	26×E16
console.anthropic.com	Anthropic: AI models (Claude)	4×E20
generativelanguage.googleapis.com	Google Gemini: AI models	8×E19
console.groq.com	Groq: hosted AI models	4×E25
api.groq.com	Groq: hosted AI models	2×E24
huggingface.co	Hugging Face: AI models and demos	25×E14 E60
router.huggingface.co	Hugging Face: AI models and demos	3×E27 E61
api.mistral.ai	Mistral: AI models	16×E18
console.mistral.ai	Mistral: AI models	2×E23
api.openai.com	OpenAI: AI models (ChatGPT's maker)	16×E15
platform.openai.com	OpenAI: AI models (ChatGPT's maker)	8×E21
openrouter.ai	OpenRouter: AI model router	8×E22
api.x.ai	xAI: AI models (Grok)	18×E17
console.x.ai	xAI: AI models (Grok)	2×E26

Error & performance monitoringReport crashes and speed to the developers. 1

sentry.io

Sentry: crash and error reports

2×E29

Social & embedsEmbedded videos, posts and share buttons. 3

instagram.com	Instagram: embedded posts	4×E11
soundcloud.com	SoundCloud: embedded audio	2×E13
www.tiktok.com	TikTok embeds: embedded videos	4×E12

Backend & data servicesDatabases, search and APIs the app runs on. 1

aiplatform.googleapis.com

Google APIs: Google services

2×E35

FontsDownload typefaces. 2

fonts.googleapis.com	Google Fonts: fonts	2×E8
fonts.gstatic.com	Google Fonts: fonts	2×E5

CDNs & hostingDeliver files (scripts, images) quickly from servers near you. 4

s3.amazonaws.com	Amazon S3: file storage	1×E41
raw.githubusercontent.com	GitHub Pages / raw files: static file hosting	6×E9
vercel.com	Vercel: hosting	8×E33
cdn.jsdelivr.net	jsDelivr: open-source file CDN	8×E34

Not identifiedServices we don't have in our list yet. 22

bun.com	not identified	69×E38
github.com	not identified	49×E36 E58
crl.apple.com	not identified	6×E56 E63
crl.d-trust.net	not identified	4×E52
ocsp.apple.com	not identified	4×E55 E62
www.accv.es	not identified	3×E45
certs.apple.com	not identified	2×E57 E64
debug.bun.sh	not identified	2×E37
ui.shadcn.com	not identified	2×E43
www.d-trust.net	not identified	2×E44
api.github.com	not identified	1×E54
bun.sh	not identified	1×E42
crl.certigna.fr	not identified	1×E49
crl.dhimyotis.com	not identified	1×E50
npm.pkg.github.com	not identified	1×E53
ocsp.accv.es	not identified	1×E46
www.bealto.com	not identified	1×E59
www.cert.fnmt.es	not identified	1×E47
www.firmaprofesional.com	not identified	1×E51
www.int	not identified	1×E40
www.world	not identified	1×E39
wwww.certigna.fr	not identified	1×E48

The app you download

We downloaded jan-mac-universal-0.8.6.zip (100.1 MB) from the project's latest release and read it without running it.

Jan-Desktop

Format: MACHO · 94.2 MB
Signature: code-signed
Libraries: 24: Command: LOAD_DYLIB Offset: 0x1008 Size: 0x38name=/usr/lib/libiconv.2.dylib, timestamp=2, current_version=7.0.0, compatibility_version=7.0.0, Command: LOAD_DYLIB Offset: 0x1040 Size: 0x60name=/System/Library/Frameworks/ColorSync.framework/Versions/A/ColorSync, timestamp=2, current_version=3813.2.2, compatibility_version=1.0.0, Command: LOAD_DYLIB Offset: 0x10a0 Size: 0x68name=/System/Library/Frameworks/CoreServices.framework/Versions/A/CoreServices, timestamp=2, current_version=1226.0.0, compatibility_version=1.0.0, Command: LOAD_DYLIB Offset: 0x890 Size: 0x58name=/System/Library/Frameworks/OSAKit.framework/Versions/A/OSAKit, timestamp=2, current_version=114.0.0, compatibility_version=1.0.0, Command: LOAD_DYLIB Offset: 0x8e8 Size: 0x68name=/System/Library/Frameworks/CoreFoundation.framework/Versions/A/CoreFoundation, timestamp=2, current_version=4201.0.0, compatibility_version=150.0.0, Command: LOAD_DYLIB Offset: 0x950 Size: 0x38name=/usr/lib/libbz2.1.0.dylib, timestamp=2, current_version=1.0.8, compatibility_version=1.0.0
Web addresses: 31: fonts.gstatic.com, eu-assets.i.posthog.com, posthog.com, fonts.googleapis.com, raw.githubusercontent.com, www.facebook.com, instagram.com, www.tiktok.com, soundcloud.com, huggingface.co, api.openai.com, api.anthropic.com, api.x.ai, api.mistral.ai, generativelanguage.googleapis.com, console.anthropic.com, platform.openai.com, openrouter.ai, console.mistral.ai, api.groq.com, console.groq.com, console.x.ai, router.huggingface.co, app.posthog.com, sentry.io, us.i.posthog.com, us.posthog.com, eu.i.posthog.com, vercel.com, cdn.jsdelivr.net, aiplatform.googleapis.com (plus 61 documentation links from bundled libraries, not counted)

E65 E66 E67

bun

Format: MACHO · 61.9 MB
Signature: code-signed
Libraries: 4: Command: LOAD_DYLIB Offset: 0x908 Size: 0x38name=/usr/lib/libicucore.A.dylib, timestamp=0, current_version=78.1.0, compatibility_version=1.0.0, Command: LOAD_DYLIB Offset: 0x940 Size: 0x38name=/usr/lib/libresolv.9.dylib, timestamp=0, current_version=1.0.0, compatibility_version=1.0.0, Command: LOAD_DYLIB Offset: 0x978 Size: 0x30name=/usr/lib/libc++.1.dylib, timestamp=0, current_version=2100.43.0, compatibility_version=1.0.0, Command: LOAD_DYLIB Offset: 0x9a8 Size: 0x38name=/usr/lib/libSystem.B.dylib, timestamp=0, current_version=1356.0.0, compatibility_version=1.0.0
Web addresses: 22: github.com, debug.bun.sh, bun.com, www.world, www.int, s3.amazonaws.com, bun.sh, ui.shadcn.com, www.d-trust.net, www.accv.es, ocsp.accv.es, www.cert.fnmt.es, wwww.certigna.fr, crl.certigna.fr, crl.dhimyotis.com, www.firmaprofesional.com, crl.d-trust.net, npm.pkg.github.com, api.github.com, ocsp.apple.com, crl.apple.com, certs.apple.com

E68 E69 E70

mlx-server

Format: MACHO · 58.3 MB
Signature: code-signed
Libraries: 38: Command: LOAD_DYLIB Offset: 0x10f0 Size: 0x30name=/usr/lib/libc++.1.dylib, timestamp=2, current_version=2000.67.0, compatibility_version=1.0.0, Command: LOAD_DYLIB Offset: 0x1120 Size: 0x60name=/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation, timestamp=2, current_version=4201.0.0, compatibility_version=300.0.0, Command: LOAD_DYLIB Offset: 0x1180 Size: 0x58name=/System/Library/Frameworks/Metal.framework/Versions/A/Metal, timestamp=2, current_version=370.64.2, compatibility_version=1.0.0, Command: LOAD_DYLIB Offset: 0x11d8 Size: 0x60name=/System/Library/Frameworks/Accelerate.framework/Versions/A/Accelerate, timestamp=2, current_version=4.0.0, compatibility_version=1.0.0, Command: LOAD_DYLIB Offset: 0x1238 Size: 0x38name=/usr/lib/libobjc.A.dylib, timestamp=2, current_version=228.0.0, compatibility_version=1.0.0, Command: LOAD_DYLIB Offset: 0x1270 Size: 0x38name=/usr/lib/libSystem.B.dylib, timestamp=2, current_version=1356.0.0, compatibility_version=1.0.0
Web addresses: 7: github.com, www.bealto.com, huggingface.co, router.huggingface.co, ocsp.apple.com, crl.apple.com, certs.apple.com

E71 E72 E73

The latest release (v0.8.6) has downloads for Linux, Windows, macOS.

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

Repository: janhq/jan

Jan is an open source alternative to ChatGPT that runs 100% offline on your computer.

GitHub description · https://github.com/janhq/jan

Licence: Apache License 2.0 (from its LICENSE file)

GitHub license · https://github.com/janhq/jan

44939 stars, last push 2026-10-14

GitHub activity · https://github.com/janhq/jan

Latest release v0.8.6 (2026-10-09) with 11 files

GitHub release · https://github.com/janhq/jan/releases/tag/v0.8.6

Web address inside the released app: fonts.gstatic.com

Jan-Desktop @ byte 0xed2fbe · “fonts.gstatic.com” · string scan

Web address inside the released app: eu-assets.i.posthog.com

Jan-Desktop @ byte 0xed30c5 · “eu-assets.i.posthog.com” · string scan

Web address inside the released app: posthog.com

Jan-Desktop @ byte 0xed30e5 · “posthog.com” · string scan

Web address inside the released app: fonts.googleapis.com

Jan-Desktop @ byte 0xed310f · “fonts.googleapis.com” · string scan

Web address inside the released app: raw.githubusercontent.com/anthropics/skills/main/skills/ExitRequestedtake_pendin

Jan-Desktop @ byte 0xed61d6 · “raw.githubusercontent.com/anthropics/skills/main/skills/ExitRequestedtake_pendin” · string scan

E10

Web address inside the released app: www.facebook.com/hashtag/

Jan-Desktop @ byte 0x101a69d · “www.facebook.com/hashtag/” · string scan

E11

Web address inside the released app: instagram.com/explore/tags/

Jan-Desktop @ byte 0x101a6d9 · “instagram.com/explore/tags/” · string scan

E12

Web address inside the released app: www.tiktok.com/tag/

Jan-Desktop @ byte 0x101a714 · “www.tiktok.com/tag/” · string scan

E13

Web address inside the released app: soundcloud.com/

Jan-Desktop @ byte 0x101aa3d · “soundcloud.com/” · string scan

E14

Web address inside the released app: huggingface.co/api/whoami-v2

Jan-Desktop @ byte 0x14d14a3 · “huggingface.co/api/whoami-v2” · string scan

E15

Web address inside the released app: api.openai.com/v1

Jan-Desktop @ byte 0x1b7883d · “api.openai.com/v1” · string scan

E16

Web address inside the released app: api.anthropic.com/v1

Jan-Desktop @ byte 0x1b92ac7 · “api.anthropic.com/v1” · string scan

E17

Web address inside the released app: api.x.ai/v1

Jan-Desktop @ byte 0x1b94888 · “api.x.ai/v1” · string scan

E18

Web address inside the released app: api.mistral.ai/v1

Jan-Desktop @ byte 0x1ba135a · “api.mistral.ai/v1” · string scan

E19

Web address inside the released app: generativelanguage.googleapis.com/v1beta

Jan-Desktop @ byte 0x1bb62aa · “generativelanguage.googleapis.com/v1beta” · string scan

E20

Web address inside the released app: console.anthropic.com/settings/keys

Jan-Desktop @ byte 0x2196f26 · “console.anthropic.com/settings/keys” · string scan

E21

Web address inside the released app: platform.openai.com/account/api-keys

Jan-Desktop @ byte 0x21971c0 · “platform.openai.com/account/api-keys” · string scan

E22

Web address inside the released app: openrouter.ai/api/v1

Jan-Desktop @ byte 0x2197bf8 · “openrouter.ai/api/v1” · string scan

E23

Web address inside the released app: console.mistral.ai/api-keys/

Jan-Desktop @ byte 0x2197fd8 · “console.mistral.ai/api-keys/” · string scan

E24

Web address inside the released app: api.groq.com/openai/v1

Jan-Desktop @ byte 0x21980ea · “api.groq.com/openai/v1” · string scan

E25

Web address inside the released app: console.groq.com/docs/models

Jan-Desktop @ byte 0x219811e · “console.groq.com/docs/models” · string scan

E26

Web address inside the released app: console.x.ai/

Jan-Desktop @ byte 0x21983a8 · “console.x.ai/” · string scan

E27

Web address inside the released app: router.huggingface.co/v1

Jan-Desktop @ byte 0x2198bc1 · “router.huggingface.co/v1” · string scan

E28

Web address inside the released app: app.posthog.com/home

Jan-Desktop @ byte 0x21b6462 · “app.posthog.com/home” · string scan

E29

Web address inside the released app: sentry.io/organizations/

Jan-Desktop @ byte 0x21c6bfc · “sentry.io/organizations/” · string scan

E30

Web address inside the released app: us.i.posthog.com

Jan-Desktop @ byte 0x21d6c07 · “us.i.posthog.com” · string scan

E31

Web address inside the released app: us.posthog.com

Jan-Desktop @ byte 0x21d6cd3 · “us.posthog.com” · string scan

E32

Web address inside the released app: eu.i.posthog.com/

Jan-Desktop @ byte 0x21df3ff · “eu.i.posthog.com/” · string scan

E33

Web address inside the released app: vercel.com/d

Jan-Desktop @ byte 0x22b3ac7 · “vercel.com/d” · string scan

E34

Web address inside the released app: cdn.jsdelivr.net/npm/emoji-datasource-apple/img/apple/64/

Jan-Desktop @ byte 0x2303cb1 · “cdn.jsdelivr.net/npm/emoji-datasource-apple/img/apple/64/” · string scan

E35

Web address inside the released app: aiplatform.googleapis.com/v1/projects/

Jan-Desktop @ byte 0x2c35e6c · “aiplatform.googleapis.com/v1/projects/” · string scan

E36

Web address inside the released app: github.com/oven-sh/bun/issues/2771

bun @ byte 0x3251ec7 · “github.com/oven-sh/bun/issues/2771” · string scan

E37

Web address inside the released app: debug.bun.sh/

bun @ byte 0x33d6754 · “debug.bun.sh/” · string scan

E38

Web address inside the released app: bun.com/favicon.ico

bun @ byte 0x33d7d4e · “bun.com/favicon.ico” · string scan

E39

Web address inside the released app: www.world

bun @ byte 0x3545810 · “www.world” · string scan

E40

Web address inside the released app: www.int

bun @ byte 0x354c5a3 · “www.int” · string scan

E41

Web address inside the released app: s3.amazonaws.com/doc/2006-03-01/

bun @ byte 0x35b8edc · “s3.amazonaws.com/doc/2006-03-01/” · string scan

E42

Web address inside the released app: bun.sh/docs/test/snapshots

bun @ byte 0x35c7a04 · “bun.sh/docs/test/snapshots” · string scan

E43

Web address inside the released app: ui.shadcn.com/schema.json

bun @ byte 0x35f8d15 · “ui.shadcn.com/schema.json” · string scan

E44

Web address inside the released app: www.d-trust.net/crl/d-trust_root_class_3_ca_2_2009.crl0

bun @ byte 0x362639f · “www.d-trust.net/crl/d-trust_root_class_3_ca_2_2009.crl0” · string scan

E45

Web address inside the released app: www.accv.es/fileadmin/Archivos/certificados/raizaccv1.crt0

bun @ byte 0x36271be · “www.accv.es/fileadmin/Archivos/certificados/raizaccv1.crt0” · string scan

E46

Web address inside the released app: ocsp.accv.es

bun @ byte 0x362720c · “ocsp.accv.es” · string scan

E47

Web address inside the released app: www.cert.fnmt.es/dpcs/0

bun @ byte 0x362e3ed · “www.cert.fnmt.es/dpcs/0” · string scan

E48

Web address inside the released app: wwww.certigna.fr/autorites/0m

bun @ byte 0x3632399 · “wwww.certigna.fr/autorites/0m” · string scan

E49

Web address inside the released app: crl.certigna.fr/certignarootca.crl01

bun @ byte 0x36323cf · “crl.certigna.fr/certignarootca.crl01” · string scan

E50

Web address inside the released app: crl.dhimyotis.com/certignarootca.crl0

bun @ byte 0x3632400 · “crl.dhimyotis.com/certignarootca.crl0” · string scan

E51

Web address inside the released app: www.firmaprofesional.com/cps0

bun @ byte 0x3637609 · “www.firmaprofesional.com/cps0” · string scan

E52

Web address inside the released app: crl.d-trust.net/crl/d-trust_br_root_ca_1_2020.crl0y

bun @ byte 0x3639a2a · “crl.d-trust.net/crl/d-trust_br_root_ca_1_2020.crl0y” · string scan

E53

Web address inside the released app: npm.pkg.github.com/npmjs

bun @ byte 0x3669212 · “npm.pkg.github.com/npmjs” · string scan

E54

Web address inside the released app: api.github.com

bun @ byte 0x366da6f · “api.github.com” · string scan

E55

Web address inside the released app: ocsp.apple.com/ocsp03-applerootca0.

bun @ byte 0x3b0031d · “ocsp.apple.com/ocsp03-applerootca0.” · string scan

E56

Web address inside the released app: crl.apple.com/root.crl0

bun @ byte 0x3b00358 · “crl.apple.com/root.crl0” · string scan

E57

Web address inside the released app: certs.apple.com/devidg2.der02

bun @ byte 0x3b00c50 · “certs.apple.com/devidg2.der02” · string scan

E58

Web address inside the released app: github.com/DTolm/VkFFT

mlx-server @ byte 0x1321564 · “github.com/DTolm/VkFFT” · string scan

E59

Web address inside the released app: www.bealto.com/gpu-fft.html

mlx-server @ byte 0x13215aa · “www.bealto.com/gpu-fft.html” · string scan

E60

Web address inside the released app: huggingface.co

mlx-server @ byte 0x1419fe0 · “huggingface.co” · string scan

E61

Web address inside the released app: router.huggingface.co

mlx-server @ byte 0x141a1d0 · “router.huggingface.co” · string scan

E62

Web address inside the released app: ocsp.apple.com/ocsp03-applerootca0.

mlx-server @ byte 0x379586b · “ocsp.apple.com/ocsp03-applerootca0.” · string scan

E63

Web address inside the released app: crl.apple.com/root.crl0

mlx-server @ byte 0x37958a6 · “crl.apple.com/root.crl0” · string scan

E64

Web address inside the released app: certs.apple.com/devidg2.der02

mlx-server @ byte 0x379619e · “certs.apple.com/devidg2.der02” · string scan

E65

REA identified Jan-Desktop as mach-o-universal (sha256 298f2d798448…)

Jan-Desktop · “298f2d7984482990” · REA inspect-artifact

E66

Jan-Desktop links 24 system libraries

Jan-Desktop · “Command: LOAD_DYLIB Offset: 0x1008 Size: 0x38name=/usr/lib/libiconv.2.dylib,” · LIEF

E67

Jan-Desktop is code-signed

Jan-Desktop · “signature” · LIEF

E68

REA identified bun as mach-o (sha256 1711e49cbdd1…)

bun · “1711e49cbdd1600e” · REA inspect-artifact

E69

bun links 4 system libraries

bun · “Command: LOAD_DYLIB Offset: 0x908 Size: 0x38name=/usr/lib/libicucore.A.dylib” · LIEF

E70

bun is code-signed

bun · “signature” · LIEF

E71

REA identified mlx-server as mach-o (sha256 e24b867ff0f0…)

mlx-server · “e24b867ff0f09d7f” · REA inspect-artifact

E72

mlx-server links 38 system libraries, including Command: LOAD_DYLIB Offset: 0x1560 Size: 0x58name=/System/Library/Frameworks/Network.framework/Versions/A/Network, timestamp=2, current_version=5569

mlx-server · “Command: LOAD_DYLIB Offset: 0x10f0 Size: 0x30name=/usr/lib/libc++.1.dylib, t” · LIEF

E73

mlx-server is code-signed

mlx-server · “signature” · LIEF

Limits

We read the app's code and its official download without running it. Code that exists may never run for you, and behaviour decided by servers is invisible.
Web addresses and libraries show what the app can talk to or do, not that it does so every time you use it.
Only open-source apps with a public GitHub repository are analysed. The release we inspected may differ from builds in app stores.
This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id 2RY7yhn5.