Nevumi is a music player for Android and Linux, built with Kotlin and Compose. It plays local files and connects to Navidrome and Subsonic-compatible servers.
Nevumi is in alpha. Features and file formats may change, and bugs are expected. Keep backups of your music files.
I started it because I couldn't find a music player with all the features I wanted. Namida came closest, but I didn't like its license. Nevumi is an independent implementation with a Material You interface, focused on local music and music servers.
- Library. Browse songs, albums, artists, genres and folders, and search everything. You choose the library tabs and Home sections.
- Playlists. Create regular, smart and M3U playlists and sort them into nested folders. Nevumi syncs them with your music server, including covers on Navidrome 0.61 or newer.
- Queue. Up next is a separate queue. Save queues with their history and position, switch between them, or export them as playlists.
- Offline. Download music from your server. Nevumi shows local and server copies of the same song as one song.
- Discovery. Artist pages show the biography, similar artists and top songs from your music server. Play similar songs from any server song or artist.
- New releases. Follow an artist from their page, and Home lists their recent and upcoming releases from MusicBrainz. Nevumi can notify you about new ones. It contacts MusicBrainz only after you follow an artist.
- SoundCloud. Search and download songs through your own sc-gate-dl server, to your music server or your device. Nevumi never contacts SoundCloud.
- Playback. Nevumi has gapless playback, crossfade, speed and pitch, repeat counts, an equalizer with AutoEQ headphone profiles, mono audio and a sleep timer.
- Lyrics. Nevumi shows synced and plain lyrics from embedded tags,
.lrcfiles next to the song and your music server. You can turn on LRCLIB lookups in Settings, and add NetEase Cloud Music for songs LRCLIB has no synced lyrics for. Tap a line to jump to it. - Waveforms. Nevumi draws waveforms from the actual audio and caches them.
- Tag editing. Edit local tags and artwork, or your Navidrome files over SFTP. Look up metadata on MusicBrainz.
- Tailscale. The built-in client reaches your servers on a tailnet without the Tailscale app or a VPN. Headscale works too.
- Scrobbling. Nevumi keeps a listening history and scrobbles to your music server, Last.fm or ListenBrainz.
- Device sync. Pair devices with a QR code to sync playlists, favorites, ratings, history and saved queues.
- Backup. Export settings, playlists, saved queues, history, favorites, ratings and connection profiles to one JSON file. Restore it on another device. The backup never includes passwords or keys.
- Themes. Pick light, dark, system or artwork-based colors, or a custom palette.
- Desktop. Linux has MPRIS media controls, right-click menus and a volume slider in the mini player. Space plays and pauses, Ctrl+←/→ change songs, Shift+←/→ seek and Ctrl+F searches. Drop folders on the window to add them to your library, or songs to play them. An optional tray icon and background playback keep music going after you close the window.
- Widget. Android has a home screen widget and a quick settings tile for the current song.
- Visualizer. Nevumi runs MilkDrop presets through projectM. Over 10,000 presets ship with the app. You can search them, mark favorites and switch presets automatically.
Online lyrics lookups are off by default. Enable them in Settings to search LRCLIB, then separately enable NetEase Cloud Music to search it when LRCLIB has no synced result. NetEase receives the song's artist and title through undocumented web-player endpoints. These requests use no account, API key or paid subscription, but access can fail or require verification.
Each NetEase lookup makes one search request and up to three lyric requests, with a ten-second timeout for the whole lookup. No published quota or third-party lyrics API agreement has been confirmed. Nevumi caches successful results in its local library database and reuses them without another online lookup. NetEase results show "Lyrics from NetEase Cloud Music".
NetEase's permission for third-party lyric display, caching and redistribution has not been confirmed. Anonymous access does not establish permission to reuse lyrics, and attribution does not grant those rights.
These Android emulator screenshots use a fictional library.
| Home | Now playing | Queue | Audio effects |
|---|---|---|---|
 |
 |
 |
 |
Android requires Android 12 or newer. APKs include arm64 and x86_64 native libraries. Linux packages target x86_64. MilkDrop needs OpenGL 3.3 on Linux or OpenGL ES 3.0 on Android.
The client uses the Subsonic REST API with token authentication, starting at API 1.13.0. Library discovery supports empty-search enumeration, album pagination and directory browsing. Streaming, downloads, playlists, favorites, ratings and scrobbling work through that API. Navidrome's native API is only used for remote file editing over SFTP.
Linux MilkDrop monitors Nevumi's audio stream through PulseAudio or PipeWire's PulseAudio service. It does not record the microphone or the mixed audio from other applications. Android feeds it directly from the playback pipeline.
The release workflows publish APKs, Arch packages and AppImages on GitHub Releases.
Nevumi's signed Android and Arch repositories run on GitHub Pages at nevumi.app.
Download an APK from GitHub Releases, install with Obtainium, or add Nevumi's F-Droid repository. The Obtainium link includes alpha releases and excludes development builds.
Scan this QR code in F-Droid to add the repository with its signing fingerprint:
To add it manually in F-Droid, paste this into the repository field:
https://nevumi.app/fdroid/repo?fingerprint=FDEBFCB9DD790730FE607ACB8340588A839C44D9EA5BA6671AB3FAB83952F94B
GitHub, Obtainium and this F-Droid repository distribute the same release APK and receive updates signed by the same app key. This is Nevumi's own repository; it is not a listing in the main f-droid.org repository.
Download the repository signing key in a terminal and check its fingerprint:
curl -fsSL -o nevumi.asc https://nevumi.app/nevumi.asc
gpg --show-keys --fingerprint nevumi.ascIt must match:
5948 F17F 1611 CC2B 995B C612 1F0D 5421 26D5 14AB
sudo pacman-key --add nevumi.asc
sudo pacman-key --lsign-key 5948F17F1611CC2B995BC6121F0D542126D514ABAdd the repository with this terminal command. It skips the step when pacman already has a [nevumi] repository:
sudo pacman-conf --repo-list | grep -qxF 'nevumi' ||
printf '%s\n' '' '[nevumi]' 'SigLevel = Required DatabaseRequired' \
'Server = https://nevumi.app/arch/$arch' |
sudo tee -a /etc/pacman.conf >/dev/nullInstall Nevumi, or update it with the rest of your system:
sudo pacman -Syu nevumiThe packages and repository database are signed. The public key is also available in packaging/nevumi.asc.
You can install a downloaded Arch package directly:
sudo pacman -U ./nevumi-0.16.0-1-x86_64.pkg.tar.zstFor an AppImage:
chmod +x ./nevumi-0.16.0-x86_64.AppImage
./nevumi-0.16.0-x86_64.AppImageIf FUSE is unavailable, run it with APPIMAGE_EXTRACT_AND_RUN=1. AppImages bundle the JVM, mpv, FFmpeg and the visualizer. The host supplies its C and C++ runtimes and graphics drivers. CI builds them on Ubuntu 24.04.
On Linux, a Secret Service provider, such as KDE's wallet service, stores server credentials.
Development APKs install separately as Nevumi dev and use the public development key in packaging/development.keystore. Linux development packages replace Nevumi and use the same local data directory.
Install JDK 21, Go 1.27.1 or newer, Android SDK platform 37.0, build tools 37.0.0, NDK 28.2.13676358 and CMake 3.22.1. Linux also needs CMake, Ninja, SDL2 and OpenGL development files, mpv and its development library, FFmpeg, libsecret and PulseAudio client tools. Desktop distributions use JDK 25 for their bundled runtime.
Set JAVA_HOME to JDK 21 and ANDROID_HOME to your Android SDK. Gradle detects installed toolchains or reads JAVA_HOME_21_X64 and JAVA_HOME_25_X64.
./gradlew :androidApp:assembleDebug
./gradlew :androidApp:assembleDevelopment
./gradlew :desktopApp:createDistributableThe first native build downloads checksum-verified projectM 4.1.8 and its evaluator. Subsequent builds reuse those sources. Native dependencies remain shared libraries. The Tailscale client in native/tailscale builds with Go modules pinned in its go.sum.
The acceptance suite uses disposable Navidrome, gonic, SFTP and scrobbling fixtures. CI runs desktop tests and Android instrumentation on API 31 and API 36 with 16 KB memory pages. Release checks also install the optimized APK and open MilkDrop. The fixture helpers under scripts/ can start the same services locally. Use an emulator for instrumentation tests, which clear the app's test data.
Pull requests run the app suites when app, build, fixture or app-packaging inputs change, including edits to the test workflow itself. Website-only PRs check JavaScript syntax and site packaging instead. CodeQL scans the languages affected by a change; scheduled and manual security scans cover every language. Release and manual acceptance runs always run both app suites.
./gradlew :shared:desktopTest
./gradlew :androidApp:connectedDebugAndroidTestDesktop UI tests need a display, such as xvfb-run, and the audio-monitor test needs a PulseAudio-compatible service. scripts/ci-tests.sh starts and stops the complete fixture set on an isolated CI runner.
development.yml builds a development prerelease when app or build inputs change on master, or on a manual workflow run. Each development run uses its own development-<run ID> tag. Assets upload to a draft before publication, so development releases work with GitHub release immutability. Dependency submission runs when Gradle manifests or configuration change. release.yml publishes tagged releases, including alphas, as regular GitHub releases after acceptance tests pass. It attaches the signed Arch and F-Droid repositories as nevumi-repositories.tar.gz and then runs website.yml. website.yml also runs on pushes to master that change the landing page. It deploys the page together with the repositories from the newest release, so a website change doesn't need a new release. A release tag such as v0.1.0 must match both platform versions. Update Android's versionCode for each Android release.
Configure these repository secrets and variables for signed releases:
| Name | Kind | Purpose |
|---|---|---|
MANIDA_ANDROID_KEYSTORE_BASE64 |
Secret | Base64-encoded release keystore |
MANIDA_ANDROID_KEYSTORE_PASSWORD |
Secret | Keystore password |
MANIDA_ANDROID_KEY_PASSWORD |
Secret | Signing-key password |
MANIDA_ANDROID_KEY_ALIAS |
Variable | Signing-key alias |
MANIDA_ARCH_SIGNING_KEY |
Secret | Armored private key for Arch packages |
MANIDA_ARCH_SIGNING_PASSPHRASE |
Secret | Arch signing-key passphrase |
MANIDA_ARCH_SIGNING_FINGERPRINT |
Variable | Full Arch signing-key fingerprint |
MANIDA_FDROID_KEYSTORE_BASE64 |
Secret | Base64-encoded F-Droid repository keystore, alias manida-fdroid |
MANIDA_FDROID_KEYSTORE_PASSWORD |
Secret | F-Droid repository keystore and key password |
GitHub Pages uses GitHub Actions as its source, with nevumi.app as the custom domain. Configure its apex DNS records using GitHub Pages' custom-domain settings. Each deployment replaces the whole site, so the website workflow always includes the repositories from the newest release. F-Droid's landing page is /fdroid; its signed index and APKs are under /fdroid/repo. The github-pages environment must allow the master branch for website changes and release tags matching v*. Development builds do not require release signing secrets.
The SVGs in badges/public are hosted by the manida-badges Cloudflare Worker. The README selects the light or dark variant to match the reader's theme. To publish badge changes, sign in to Cloudflare with Wrangler and run:
cd badges
bun install --frozen-lockfile
bun run check
bun run deployNevumi uses AGPL-3.0-only. Namida inspired the feature requirements. Nevumi does not include its implementation or assets.
The built-in Tailscale client uses tsnet, under BSD-3-Clause, built without log uploads. Its Go dependencies' license notices ship with the Linux libraries and inside the APK.
MilkDrop rendering uses projectM, under LGPL-2.1-or-later. The desktop window follows the approach used by Spotifast. Third-party license notices ship with the native libraries. Run python scripts/package-native-sources.py --output .test-environment/release-sources to download the exact projectM, evaluator and mpv sources and copy Nevumi's projectM patch. The source URLs and checksums are pinned in native/CMakeLists.txt and scripts/build_mpv.py.
The bundled presets and textures retain their upstream authorship and notices, including the preset pack's distribution notice. python scripts/package-milkdrop-presets.py reproduces the library from checksum-verified source archives. Each app unpacks the library on first use and reuses it afterward.
The README badges use Simple Icons and Roboto lettering rendered as SVG paths.