cmus music player (android) is an open-source (GPL-2.0-only) Android app by Patrick Gaskin. The APK we host is 7.4 MB, it needs Android 14 or newer, and it declares 5 permissions.
The file on this page is cmus music player (android) 6, 7.36 MB, and it installs on Android 14 and newer.
We compared the signing certificate of this build with the certificate recorded the first time net.pgaskin.cmus.android entered the site, and published both the file's SHA-256 and the certificate's fingerprint above so you can check the download yourself. That comparison says the file was not repackaged by someone else; it is not a review of what the app does.
The manifest inside the APK declares 5 permissions, none of which cover contacts, location, SMS, the camera or the microphone.
Its licence is GPL-2.0-only. We took this build from F-Droid, and the source for this exact version is linked below.
We do not show a star rating or an install count for this page: we have no measured figure for either, and a number we cannot source is worth less than an empty field.
- Version
- 6
- Size
- 7.36 MB
- Requires Android
- API 34
- Package
- net.pgaskin.cmus.android
- Signature checked on
- Sep 24, 2026
- Where this file came from
- F-Droid
- Licence
- GPL-2.0-only
- Source code
- Source for this version
File SHA-256: 54a2c7894120a45933408011c80bb74da1ab3861f2e3cacc8e9e366ad4f226cf
Signing certificate (SHA-256): 08d46917a818ad0c479733b458acb7488a4cc39f0a5a20ccc6a39181b2fb8f55
We check that this file carries the same signing certificate as earlier releases of the same package. That shows the APK was not repackaged by someone else — it is not a security review of the app.
Declared permissions
- FOREGROUND_SERVICE
- FOREGROUND_SERVICE_MEDIA_PLAYBACK
- POST_NOTIFICATIONS
- READ_MEDIA_AUDIO
- MANAGE_EXTERNAL_STORAGE
Screenshots


