Scope for Linux
Everything you installed. One list.
Scope for Linux gathers your apps from APT, Snap, Flatpak and AppImage into one searchable window. Update or uninstall them, and read the exact command before anything runs.
Version 0.3.7 for x86-64. Free and open source under the MIT License.
This is a working replica. Search, open a row, then try Uninstall or Update.Nothing runs on your computer.
Each source keeps its own commands
Scope doesn't replace your package managers. It calls them with typed arguments and never edits their databases. Pick a source to see exactly what runs.
Nothing runs the moment you click
Every update or uninstall becomes a plan first. Two checks stand between your confirmation and the package manager, and both fail closed.
-
Plan
Scope builds the exact commands for the app you chose, such as
snap remove firefox. APT transactions are simulated withLC_ALL=C, and the result is stored with the plan. -
Confirm
You read the plan, with sizes and side effects, and confirm or cancel. A plan works once and expires after five minutes.
-
Revalidate
Scope checks that the package is still installed, that its version hasn't moved, and that the deny-list still allows it. APT simulations must match the preview.
-
Run
The command runs through the standard Polkit dialog. Progress appears at the bottom of the window, and you can keep browsing.
Straight from the app
Scope for Linux is a native Rust app built on Zed's GPUI toolkit, with no webview. These screenshots come from a real Ubuntu desktop.
Built for the machine you depend on
Package changes are hard to undo, so Scope is conservative by default. When it can't verify something, it stops.
Read how safety worksNever sees your password
Admin commands go through pkexec and the system's own Polkit dialog.
System packages are off limits
A deny-list blocks kernels, critical APT packages and Snap runtimes, at preview and again before running.
APT is simulated twice
If the transaction would take a protected package with it, or changes after the preview, the plan doesn't run.
No shell in between
Every command is a fixed argument list, so nothing typed in the app can become shell syntax.
Plans expire
A confirmed plan runs once, within five minutes. A stale plan never runs against a changed system.
Signed self-updates
Scope installs its own updates only after verifying a minisign-signed SHA-256 manifest, and asks first.
Install Scope for Linux
Built for Ubuntu on x86-64. Official .deb builds update themselves after you confirm.
Questions
Short answers. The safety page covers the checks in detail.
What is Scope for Linux?
Scope for Linux is a free, open-source app manager for Ubuntu and other Linux systems. It lists apps from APT, Snap, Flatpak and AppImage in one searchable list, so you can see, update and uninstall them from one place.
Which Linux apps can Scope for Linux manage?
Scope shows APT manual installs, Snap apps, Flatpak apps in user and system scope, AppImages, and desktop launchers that no package manager owns. Update and uninstall work for APT, Snap and Flatpak. AppImages and desktop launchers are listed for discovery, and their actions are disabled. Support for uv, pipx and Cargo tools is coming in the next release.
Does Scope ask for my password?
No. Commands that need root use the standard Polkit dialog through pkexec. Scope never sees or stores your password.
Can Scope remove critical system packages by accident?
No. A backend deny-list protects critical APT packages, kernel images, Snap runtimes and related system libraries. The check runs when you build a plan and again before it runs. Protected rows have a disabled uninstall action.
Which Linux distributions does Scope support?
Ubuntu is the primary target, with a .deb and an AppImage for x86-64. Other Debian-based systems can build from source with Rust. .rpm packages, and Fedora and Arch package-manager support, are not available yet.
Is Scope free and open source?
Yes. Scope is released under the MIT License, and the source is on GitHub.