HatchZip

xevrion · Extract archives while progressively shrinking the original to reuse disk space; source archives are consumed.

GitHubUtilitiesFree and open sourceApple silicon · Intel
Downloads come from github.com/xevrion/hatchzip · OpenNavo hosts no installers

HatchZip is a Utilities app for Mac. It is made by xevrion. You download it from github.com/xevrion/hatchzip.

Quick facts

Latest version
0.1.5 · Oct 25
Download source
github.com/xevrion/hatchzip
Price
Free and open source
Developer
xevrion

About

HatchZip is an open-source archive extractor for low-disk-space workflows, licensed under MIT or Apache-2.0. It extracts pieces and progressively truncates the source archive, reusing released space. It supports ZIP, 7z, tar, tar.gz and split archives, with a desktop interface and the hatchzip/hz CLI. Use hatchzip check to inspect space requirements without changes; interrupted extraction can resume.

Important: extraction consumes the original archive. Keep a separate backup for irreplaceable data and consider --verify-first. Do not delete .hatchzip or .hatchzip-tail progress files mid-extraction. RAR is not supported; a large solid 7z block may still require substantial free space. APFS snapshots can prevent space reclamation; hole-punching savings on APFS are not verified.

Official macOS downloads include separate Apple silicon and Intel DMGs. The packaging Info.plist declares macOS 11.0 minimum; this is a declared requirement, not our runtime test. Drag the app to Applications. The app is ad-hoc signed, not Developer ID signed or notarized; review the source and Gatekeeper warning before deciding whether to allow it. Release checked: v0.1.2. No benchmark or extraction safety test was performed by OpenNavo.

https://github.com/xevrion/hatchzip · https://github.com/xevrion/hatchzip/releases/latest

System requirements

macOSVersionChipsDownloadSource
macOS 11.0 or later—Apple silicon · Runs natively—github.com/xevrion/hatchzip/blob/main/packaging/macos/Info.plistChecked Pending verification
macOS 11.0 or later—Intel—github.com/xevrion/hatchzip/blob/main/packaging/macos/Info.plistChecked Pending verification

What’s new in 0.1.5

New · From GitHub Releases

Security

This release fixes GHSA-446w-m5mg-2f58 (High), reported by @Valcyle. Update if you open archives that came together with other files.

HatchZip keeps two progress files next to an archive while it extracts, <archive>.hatchzip and <archive>.hatchzip-tail, so a stopped extraction can resume. Before this release, progress files planted next to an archive, for example inside a downloaded bundle, could make a resume shrink or delete other files, or create links outside the output folder. A resume now uses them only when:

  • every volume they name is one of that archive's own volumes, and none of them is a link;
  • every link they name is inside the output folder, and no link already in the output folder lies on the way;
  • the output folder is the default one next to the archive, a folder chosen on this computer, or the folder named again with -o.

Anything else is refused before a file is changed. Folders you choose with -o or in the app are recorded in your user profile, so a resume on the same computer works as before. To continue on another computer, name the folder again with -o.

Also published: GHSA-6rh6-c2xg-gj28 (High), reported by Benjamin Kincses (@Dextheking1), a link entry below another link entry. It was already fixed in 0.1.3.

Changes

  • hatchzip restore accepts -o to name the output folder of the extraction it undoes.
  • HatchZip refuses to extract into a default output folder that is a link, and to change an archive volume that is a link.
  • CodeQL analysis of the Rust code and the workflows runs on every change.

Downloads

Every file comes with a SHA-256 checksum and signed build provenance. To check a download:

gh attestation verify HatchZip-x64.msi --repo xevrion/hatchzip

Checksums and VirusTotal links for every file: Verify your download.

Package managers: brew install xevrion/tap/hatchzip (command line), brew install --cask xevrion/tap/hatchzip (app), and scoop bucket add xevrion https://github.com/xevrion/scoop-bucket followed by scoop install xevrion/hatchzip.

RAR archives are decoded by UnRAR, under its own license, included with every download.

Full Changelog: https://github.com/xevrion/hatchzip/compare/v0.1.4...v0.1.5

HatchZip security facts

Only facts that can be checked, each with its source and date. This is not a safety certification. To check the files you downloaded, scan them on your Mac with OpenNavo.

Open source
Yes · github.com/xevrion/hatchzip · Apache-2.0Checked
Scan with OpenNavoOpens a scan preview in the OpenNavo app; you decide whether to start it. ClamAV on Mac

Questions about HatchZip

Is HatchZip open source?

HatchZip’s source code is public on GitHub (xevrion/hatchzip) under the Apache-2.0 license.

What is the latest version of HatchZip?

The latest version is 0.1.5.

Sources

Every fact on this page names its source and check date. Facts past their validity read “as of” their date and are no longer stated as current.