Novità di iKnowMyMac

New

• An action on every row. A copy that is behind has Fix…, and a line that no longer gets security fixes has Move to a supported line, such as Move to 26…. Each installer gets its own command: brew upgrade node or brew install node@24 for Homebrew, nvm install 26.12.1 (and nvm alias default 26.12.1 when the old version was nvm's default), fnm install, volta install node@26.12.1, mise install, or the newer nodejs.org or go.dev installer. The line suggested is the one your projects pin if it still gets security fixes, else the newest one that does (for Node.js, the newest even-numbered line).
• Fix All. On each incident card and for the whole Runtimes tab, one sheet lists every step in order with its exact commands and a checkbox. Fixes are ticked; removing an old version or changing a project's pin never is. Steps run one at a time, stop at the first one that fails with its output shown, and then Package Watch checks everything again: each row it fixed says Fixed, and the card, the Needs you row and the menu bar line update. A card says "Nothing on this Mac is affected any more" only when every place it covers could be read.
• Remove old versions. Remove… on an end-of-life or superseded copy first lists the projects that still pin that version (.nvmrc, .node-version, .tool-versions, package.json engines.node and volta.node, composer.json, go.mod, mise.toml) and says what happens to them. It offers to move each pin to the new line, shown as a one-line diff, with Undo. Then it runs the installer's own command, such as brew uninstall node@20 or nvm uninstall 20.3.1; when another formula still needs it, Homebrew refuses and its message is shown word for word. The version nvm, fnm, mise or asdf uses as its default is never removed, and Volta, which has no such command, gets the steps.
• Java certificates removed for you. For a JDK from Homebrew or in ~/Library/Java, iKnowMyMac keeps a copy of its cacerts file as cacerts.before-emudhra, removes the eMudhra roots with that JDK's own keytool, reads the file again to check they are gone, and offers Undo. No password is needed. For a JDK in /Library/Java, choose Do it for me, which asks for an administrator's password with the standard macOS prompt and runs the script it showed you, or follow the numbered steps.
• The other certificate bundles, fixed from here. Homebrew's bundle runs brew upgrade ca-certificates, Composer's runs composer update composer/ca-bundle in the project, and certifi is upgraded with each Python environment's own pip, with a pinned certifi== line in its requirements file updated too.
• nvm and Herd, your way. Choose In Terminal (Terminal opens a file holding only the commands shown, and you watch it run), Here (a shell that loads only nvm's own script, never your shell profile; for Herd, its own herd php:update), or Copy.
• History. Settings › Package Watch › History lists what ran, how it ran (here, in Terminal, with the administrator prompt, or by iKnowMyMac), how it ended, and Undo where it applies.

Changed

• Old versions stay until you choose Remove…. Fix and Move still keep the old version installed beside the new one: Homebrew runs with HOMEBREW_NO_INSTALL_CLEANUP=1. A row Fix fixed stays listed, marked Fixed, until you remove it.
• The nodejs.org and go.dev installers. Moving one to a supported line: download the newer installer, then choose Do it for me, which checks the installer's signature and installs it with the macOS administrator prompt, or open it yourself.

Privacy

• Nothing new is sent. Homebrew, nvm, pip and Herd download updates from where they always do, and iKnowMyMac sends nothing about your Mac. It makes no new request: the nodejs.org or go.dev installer is one you download.
• The administrator prompt is macOS's own. The password goes to macOS, never to iKnowMyMac, and nothing is kept. iKnowMyMac never runs sudo and installs no privileged tool for this; its helper stays read-only.
• Nothing runs without a press. Every command, file and script is shown word for word before it runs. History keeps what ran in ~/Library/Application Support/iKnowMyMac/Fix, never a password.

New

• Is your Mac affected? Package Watch has a new tab, Runtimes. It finds every Node.js, PHP and Go on your Mac, from Homebrew, nvm, Volta, fnm, mise, asdf, Laravel Herd, MAMP and the installers from nodejs.org and go.dev, and checks each one against the latest security releases for its release line. A copy that is behind names the version that has the security fixes. A line that no longer gets security fixes, such as PHP 8.1 or Node.js 20, is marked as such.
• The exact update command for each copy. Each copy shows the command for the tool that installed it, such as brew upgrade node, volta install node@24.22.1, fnm install 24.22.1, mise install node@24.22.1 or go install golang.org/dl/go1.26.10@latest. iKnowMyMac shows the command before it runs and runs it only after you confirm. Old versions are never removed: Homebrew's upgrade runs with HOMEBREW_NO_INSTALL_CLEANUP=1, and mise installs the fixed version without changing your default. For nvm, the command is for you to copy into Terminal. Laravel Herd, MAMP and the nodejs.org and go.dev installers get numbered steps instead.
• Certificate bundles that still trust eMudhra. Eight eMudhra certificates had private keys anyone could work out. Safari, Chrome and Firefox already block them, and Apple blocked them on 19 October, but tools that carry their own list of trusted certificates trust them until they are updated. iKnowMyMac checks Homebrew's ca-certificates, the cacerts file of each Java JDK, Composer's ca-bundle in your projects, and Python's certifi in every environment, which Package Watch already flags when it is older than 2026.10.19. There is no JDK update for this yet, so for Java it shows the exact keytool steps to find the certificates by their fingerprint and remove them from that JDK's cacerts file; for a JDK in /Library/Java they need an administrator's password, and iKnowMyMac never runs them.
• Incident cards. Cards for the eMudhra certificates, PHP2Shell and the Node.js October security release say what on this Mac is affected, where each copy is and which tool installed it, and what is not. A new incident arrives with the list, without an app update.
• Told once, when it matters. When an incident affects this Mac, a Needs you row, a line in the menu bar and one quiet alert per incident say so, such as “11 runtimes and 5 bundles need security updates”. Nothing alerts when nothing here is affected.
• Search anything finds them. Type node, php, go, java, emudhra, php2shell or certifi to go to the runtime rows, the certificate bundles and the cards.

Changed

• A switch for the runtimes check. Settings › Package Watch has “Check Node.js, PHP and Go versions and certificate bundles”. It is on by default and runs on Package Watch's own schedule.

Privacy

• One new download, the same for everyone. The runtime list, iknowmymac.com/lists/runtimes-v1.json with its signature, is fetched only while the runtimes check is on, with the package list's hourly check. It is the same file for every user, the request says nothing about your Mac, and the app checks the signature before using the list. Settings › Privacy lists it as Runtime list.
• Found and matched on your Mac. Versions are read from the installers' own folders: iKnowMyMac never searches your whole home folder and never runs your shell profile. Only Laravel Herd's PHP, which keeps no version on disk, is asked for its version. Nothing about the runtimes, certificates or projects it finds leaves your Mac.
• The full list of what leaves your Mac is in Settings › Privacy and in the privacy policy.

New

• See what your Mac sends and receives. Network › Traffic lists the connections your Mac makes and receives, which app made each one and how much it sent. With the helper it also sees system processes and apps such as WhatsApp that use macOS’s own networking. Each connection names what started it, such as node ← npm install ← zsh ← Ghostty, with the project and the agent session it belongs to, and the views sort the day by app, domain, project or agent session. Turn it on when you want it: it never blocks or changes a connection, and what it records stays on this Mac. It starts in Connections mode, where host names are guesses from a name look-up of each address. Turn on the optional network filter for real host names and the data amounts of system processes: it only watches, always lets traffic through, and you can turn it off again at any time in Settings › Traffic. Traffic never reports a TLS version.
• What an install downloaded. When npm, pip, Homebrew, Cargo, RubyGems or CocoaPods installs something, the Installs view lists the run, the project it ran in, each host it downloaded from and how much. Domains your Mac has never contacted before are marked New.
• Inspect one project's requests. Network › Inspect opens an inspected terminal in Ghostty, iTerm, Terminal or Warp, or gives you eval "$(ikmm inspect env my-project)" for your own shell. The tools in it send their HTTP and HTTPS requests through a local proxy on 127.0.0.1, so you see full URLs, headers, bodies and timing, with Copy as cURL and Export HAR. Auth headers are hidden until you press Reveal. The certificate is made for that project and never added to your trust settings, so browsers and other apps are untouched. A tool in that terminal that skips the proxy is pointed out, and Stop inspecting closes the proxy.
• App Inspector. See the network requests of iPhone and simulator apps that include the Pulse SDK (versions 4 and 5), live on your Mac, and push mock responses while you test. Mock this response turns a captured response into a mock, and you can export HAR and open .pulse files. It has its own row under Developer, is off until you turn it on, and nothing listens on your network while it is off.

Changed

• What iKnowMyMac keeps, in full. Settings › General › Storage lists the Traffic log, App Inspector sessions and Inspected requests, each with Delete….
• The command-line tool answers to ikmm. Installing it from Settings › Updates now adds ikmm beside iknowmymac.

Privacy

• Off until you turn them on, and kept on your Mac. Traffic records only after you turn it on and never sends what it records anywhere. The one request it makes itself is a name look-up, to the DNS server your Mac uses, for an address your Mac already contacted, while Look up names for addresses is on. Inspect's proxy runs on 127.0.0.1 for one project at a time. App Inspector listens on your local network only while it is on, for your own apps that include the Pulse SDK. Nothing goes through our servers. The privacy policy lists each one.

Fixed

• A few bugs you reported. This update fixes a few problems that customers told us about. Thank you for writing in: every report makes iKnowMyMac better for everyone.

New

• Which tab uses the most memory. Memory › Browser tabs splits Chrome, Brave, Edge, Arc, Vivaldi and Safari into their tabs, extensions and the browser itself, with each tab process's real memory. Show Tab Names lists your open tabs (macOS asks you first). Browsers don't tell other apps which tab is in which process, so Measure Each Tab finds out: iKnowMyMac keeps each tab busy for a tenth of a second and sees which process it is in. It needs Allow JavaScript from Apple Events (View › Developer) turned on in every Chrome profile you have open, because Chrome keeps that setting per profile; tabs in a profile without it are counted and left out. Chrome pauses tabs you haven't looked at for a while; they're counted too, and Measure Paused Tabs shows each one for a moment to measure it, then puts your windows back. Your tabs are then listed by memory, with Show and Close. Safari names its tab processes after their sites, so Safari's tabs are matched without that setting. iKnowMyMac never sees what's on your pages: it knows only each tab's title and address, and they never leave your Mac.
• Fix… in Package Watch. When a compromised package is on your Mac, Fix lists every change it would make, place by place, and makes them only when you press Fix. Cache copies go to the Trash. A project gets the fixed release pinned in package.json, then its own npm, pnpm, yarn or Bun updates the lockfile with install scripts off, and an installed bad copy goes to the Trash. A lockfile that came with a downloaded library (in bower_components or node_modules) goes to the Trash; the library's code stays. Anything Fix can't change, such as a Python environment, is listed with the reason and the command to run. One click undoes a fix: every file is put back, and what Fix moved to the Trash goes back where it was.
• Quieter alerts, your way. On any alert, choose Don't Alert About This App, or turn that kind of alert off, right from the notification or the notch. Settings → Alerts lists the apps you muted, with Unmute, and can mute an app before it ever alerts. The memory and CPU gauge at the notch now waits until your Mac is seriously short, since busy apps raise memory use all day; Settings → Alerts can bring back the old behaviour or turn it off. Messages such as “Claude Code finished” no longer pop up while you're in the app they're about, an agent's message waits for a minute of work, and the bell on a message turns it off for good.
• What's New after every update. Every update now opens a short What's New, hotfixes included, and if you skipped a version you see what you missed.

Fixed

• The main window opens after a restart. When iKnowMyMac started at login, Open and "Why is my Mac slow?" in the menu bar did nothing, and neither did clicking a notification. The window only learned how to open itself the first time it was shown, and after a restart it never had been. It now opens from every one of those places.
• The menu bar popover keeps its top. When everything in the popover was taller than the screen allows, for example with the Internet check open and recent screenshots listed, its top was cut off: the search field, the tabs and the first row of figures. It now scrolls instead, starting at the top.
• Full Disk Access is recognised. On macOS 27, iKnowMyMac could say it did not have Full Disk Access when it did, and then left Desktop, Documents, Downloads and cloud folders out of Search, Package Watch and Agent Undo. It now checks in several places that only Full Disk Access opens, none of which ever asks you for permission.
• Package Watch says where. When a package is found in a cache, each place now shows the version it holds and where that cache is on your Mac, with a button to show it in Finder. For npm's and pnpm's caches it also explains why searching your Mac for the package's name finds nothing: those caches store files under coded names.
• Every bad version, in full. The Bad versions column shortens long lists. Hovering shows the whole list, and opening a package shows every bad version and which of them are on this Mac.

Changed

• Clearer wording when access is missing. The note now reads "Not checked, because iKnowMyMac doesn't have Full Disk Access: …", with a button that opens the right place in System Settings.
• The right command for a package something else pulls in. It used to suggest npm install name@version, which would have added the package to your project instead of fixing what asks for it. It now suggests an override.

Privacy

• Nothing new leaves your Mac. The Full Disk Access check only tries to open files on this Mac and reads nothing from them. When Fix updates a lockfile, your own package manager contacts the registry in your own settings, as any install does, and Fix says so before it runs.

Fixed

• Every section of Settings can be opened. Settings was a row of tabs in a window that could not be widened, and the sections that did not fit went into a menu whose items could not be clicked: Tidy, Helper, Privacy, Feedback, Search, Package Watch, Agent Undo and License. Settings now lists every section in a sidebar, grouped as General, Alerts, Features and This Mac, and the window can be made bigger. Every Settings… button and palette command still opens the right section.
• What's New opens after an update. After updating, iKnowMyMac starts in the menu bar with no window, and the notes waited for a window that never came. When there are notes to read, the window now opens with them at launch, once.
• Agent Undo could keep far more than it counted. A customer found iKnowMyMac's folder in Application Support at 22 GB. Agent Undo's limit counted only replaced and deleted versions, and it kept every copy after being turned off, where nothing counted them any more. Both now stay within the limit; see Changed.
• Old app versions kept by Updates had no limit, and were cleared only after another update ran. Installers that Updates downloaded for apps that install themselves were never deleted. Both are now cleared on schedule and kept within a limit.
• The undo folder deleted by hand. If you deleted Agent Undo's folder while iKnowMyMac was running, it went on listing copies that were gone. It now notices and starts again.

Changed

• Agent sessions has its own row. What Claude Code, Codex and other coding agents start, and the dev servers they leave running, now sit under Developer in the sidebar, right after Projects, marked New, instead of in a tab inside Projects. The orange count of sessions that left something running moved there with it. Projects keeps Dev servers and AI models.
• Storage used by iKnowMyMac. Settings → General lists everything iKnowMyMac keeps on your Mac: Agent Undo's copies, old app versions, downloaded installers, update lists, the Search index, the usage history, Package Watch's records, the USB log, and settings and small records. Each shows the space it really uses, next to what disk tools show where that is noticeably more, with a Delete, Clear or Rebuild button. Whatever cannot be fetched or built again asks first.
• Why a disk tool shows more. Agent Undo's copy of a file shares its space with the original until one of them changes, and the Finder and disk tools count every copy in full. On our test Mac a disk tool showed about 12 GB for Agent Undo's folder while the copies really used about 0.2 GB. The list shows both figures.
• Agent Undo keeps less. It now uses at most 5 GB or 5% of your free space, whichever is less (it was 10 GB or 10%); if you chose your own limit, it stays. Turning Agent Undo off now deletes its copies, after asking. A folder that was added because an agent session ran in it is let go after 14 days with no session there. Your Pictures, Movies and Music folders, and folders whose copies would show as more than 10 GB, are not added that way; you can still add them in Settings.
• Easier to find Agent Undo. The Agent Undo line in Agent sessions has its own Settings… button, the storage list has one for Agent Undo, and the palette has "Agent Undo Settings" and "Delete Agent Undo Copies…", which opens the confirmation and deletes nothing by itself.
• Old app versions from Updates are kept for the time you chose, as before, and together they and downloaded installers now use at most 10 GB or 10% of your free space, whichever is less; the oldest go first. They are checked when iKnowMyMac starts and every hour, whether or not the Updates tab is on, and nothing is deleted while an update is being installed.
• Pulse's Texture is off until you turn it on. New installs start with it off, and this update switched it off once for everyone who had it on from before. If you liked it, turn it on in Pulse: your material and intensity are kept, and your choice stays from then on. While Texture is off, nothing reads the trackpad.
• USB file activity keeps less. A session that copies very many files to a drive no longer keeps every path for as long as the log.

Privacy

• Nothing new leaves your Mac. The storage list is measured on your Mac and makes no network request. Agent Undo's copies stay in iKnowMyMac's own folder on your Mac, on the same disk as the originals, so they are not a backup.

New

• Package Watch. A new item under Developer. It keeps an inventory of the npm, pnpm, Yarn, Bun and Python packages on your Mac: what your lockfiles name, what is installed in your projects, global installs, and the package managers' caches. It matches that inventory against a list of versions reported as compromised, and matches again when a project changes or the list does.
• Incidents. The first tab opens with what was found and what was checked: “2 compromised packages are on this Mac”, or “No known-bad versions found on this Mac”, followed by the number of projects and installed packages, how current the list is and when it was last checked. Recent incidents that are not on your Mac stay in the list, marked No.
• A finding opens to three parts. Where: each project or cache, whether the package is installed there, only named in a lockfile or only in a cache, and what pulls it in, such as storefront → @acme/api-client → axios, where the lockfile records it. How serious here: since when it has been installed, and whether it has an install script, which would have run at install. What to do, in order: stop running the project, the release to move to with a command to copy, and what to rotate. Mark as handled when you're done; the finding comes back if the bad version reappears.
• Look up any package. Type a name, or name@version, such as axios or axios@1.14.1, and see every place it is on your Mac, grouped by version, with how it is present and what pulls it in. It needs no list, so it works in the first hours of an incident: public lists can run hours behind the news. If the package isn't on your Mac, the answer says what was checked, and Watch this package tells you if it ever appears.
• Known holes. A separate, quiet tab for honest releases with a published critical or high vulnerability and a fixed release: per project, the version to move to and what pulls the package in. The same hole published under two IDs is listed once. This tab never notifies, and Settings → Packages can limit it to critical or turn it off. Python's part is incomplete: about a quarter of its vulnerability records carry no usable severity, and the tab says so.
• How long a match takes. On our test Mac (M1 Pro, 16 GB, busy with other work), matching the whole list of 240,896 entries against a made-up inventory the size of a developer's Mac, 72,801 package copies, took 0.56 to 0.57 seconds.
• Agent Undo. In Projects › Agent sessions, each coding agent session now says what it did to the project folder, such as “14 changed · 3 deleted · 6 added”, with two buttons, Changes and Undo…. Changes lists the files, Deleted first, then Changed and Added, each with its size and time, and a text file shows what changed, before and after. A deleted file that git has no copy of is marked “not in git”. Agent Undo adds no row to the sidebar.
• Put back one file, a few, or the whole folder. Tick files and choose Put back, or choose “Put the folder back as it was at 13:02”, which is the moment the session started. A confirmation lists what will be restored, replaced, removed and left alone, and asks once. Whatever a restore replaces or removes is kept first, so Undo the undo puts it back. A file iKnowMyMac has no copy of is never replaced or removed: it is listed as left alone, with the reason. All of this works after the session has ended, for as long as the copies are kept.
• What Agent Undo cannot do. The newest change can be missed: iKnowMyMac learns that a file changed only after it has changed, and copies it once it has been left alone for a moment, longer while the disk is busy. Work that is written and then deleted or overwritten again before that was never copied. Git history is not covered: the .git folder is not copied, so after a whole repository is deleted the working files can be put back and the history cannot. Also not covered: files over 200 MB, folders that can be rebuilt such as node_modules and build output, folders on another disk or in a cloud folder, and changes made while iKnowMyMac was not running. The copies are on the same disk as the originals, so this is not a backup.
• Agent Undo is on from the start, and says so. The first time you open Agent sessions, a card explains what is kept, where and for how long, with Keep It On, Turn Off and Settings…. Copies are kept for each project folder an agent session runs in, and for folders you add in Settings → Agent Undo. When a session deletes 5 or more files that git has no copy of, a Needs you row names the agent and the number.
• Why did that fail? Diagnose answers a second question. Its header has two tabs, Slow Mac and Something failed. Something failed lists what iKnowMyMac saw go wrong in the last 30 days, each with a one-line reason, and every row opens to the same three parts: what happened, the most likely reason and how sure the app is, and what to do.
• A disk that disappeared without being ejected. The reason is read from your Mac's own log at that moment and kept with the entry, and the answer says how sure it is. Two cases were checked with a real drive on macOS 27, a drive pulled from an adapter that stayed connected and an adapter pulled from the Mac, and those are marked fairly sure. A drop just after the Mac slept or woke, or a connection that may have been lost, is marked not sure. A drive that was pulled out and a drive that stopped responding look the same from the Mac, and the answer says that. When macOS kept no record, it says “macOS kept no record of why”. If the same drive has dropped before, the answer counts it: “2nd time this month for this drive”.
• A disk that won't eject. When macOS refuses an eject and says only “in use”, a card lists which of your apps are using the disk, with the file each has open or the folder it is working in. Quit these and eject names each app and asks once; then each app is asked to quit, so it can ask you to save, and the disk is ejected. System work is never quit: the card says what it is, and the eject waits for it. Processes that belong to macOS or to other accounts can't be looked inside from your account, and the card says how many those are. Nothing is forced unless you choose that afterwards, behind a second confirmation. On our test Mac (M1 Pro, macOS 27) the scan for what was using a test disk image took 39 to 44 milliseconds.

Changed

• The sidebar keeps one group open at a time, on new installs. The group you are in is open and the others fold to a one-line summary, such as “3 · 1 needs you”. Opening a group folds the last one, and opening a screen from the palette, a shortcut or a Needs you row opens its group. If you used an earlier version, your sidebar stays as it was. Settings → Arrange → Sidebar has Keep all groups open, to switch either way.
• New in the sidebar. A row that is new shows New for 14 days, or until you open it, and its group shows it while folded. Package Watch is the first.
• Eject works the same way everywhere. Eject in USB › Connected now, in Safe look and in the palette all go through the same steps, so a refused eject always shows what is using the disk.
• A disk removed without ejecting is recorded the same way in the USB log, whichever event macOS reports first.
• Alerts without the sound. This was asked for on the feedback board. Settings → Alerts now starts with a Sound section. Turn off “Play a sound with alerts” and alerts still arrive as notifications and at the notch, without a sound. “Mute event sounds too” makes finished builds, agents and long commands go quiet as well. The palette has it both ways round: “Mute alert sounds” and “Turn alert sounds back on”. Updating changes nothing by itself: your alerts keep their sound until you turn it off.
• The palette gains “Am I affected by…”, which opens Look up, “Check packages now”, “Undo what the agent did”, and Eject for a connected disk.
• Settings. A Packages pane for the hourly check and Known holes, an Agent Undo pane for its folders, how long copies are kept and how much space they may use, and switches under Alerts for Something failed.

Privacy

• Nothing about your packages leaves your Mac. The list of known-bad versions is downloaded whole, the same file for every user, and matched on your Mac. No request names a package, a version, a project or a path.
• The list comes from iknowmymac.com, checked every hour with a request that costs one “not modified” reply when nothing has changed. The app checks the list's signature before using it. If our list can't be fetched or verified for a day, the app can build the same list from the public database's own files instead, about 254 MB, and never on a metered or Low Data connection. Settings → Packages turns the hourly check off; the screen then says the list is stale.
• Credential files are checked for presence only. “What to rotate” says that an npm token file, a cloud login, SSH keys or a project's .env exist on your Mac. iKnowMyMac never opens them, and looks for them only when something compromised was installed.
• It never changes a project. Package Watch runs no package manager, edits no lockfile and deletes nothing. Where a command helps, it is text for you to copy.
• Agent Undo keeps copies of your files, on your Mac only. This is new: until now iKnowMyMac kept names and figures, never what is inside a file. The copies are in iKnowMyMac's own folder, ~/Library/Application Support/iKnowMyMac/undo/, which only your account can open. They are never uploaded, never synced and never added to diagnostics, Search and Spotlight leave them out, and the folder is marked to be left out of Time Machine. Agent Undo makes no network request.
• How long Agent Undo's copies stay, and how much room they take. A version that was replaced, or whose file was deleted, is kept for 14 days. Together they may use up to 10 GB or 10% of your free space, whichever is less, and the oldest go first. The copy of a file as it is now shares its space with the original until one of them changes. Settings → Agent Undo changes both limits, turns Agent Undo off, and can delete every copy.
• The disk answers are read on your Mac. The few system log lines that explain a vanished disk are kept with the USB log on your Mac, and Something failed makes no network request.
• The full list of what leaves your Mac is in Settings → Privacy and in the privacy policy.

Credits

• Package Watch's list is built from public data: the OpenSSF Malicious Packages repository (Apache-2.0), and the GitHub Advisory Database and the PyPI Advisory Database (both CC-BY 4.0), as collected by the OSV database. We select the records about npm and PyPI packages and change their format, not what they say. The licence notices are in Settings → Packages.

New

• Search anything. Press ⌥Space from any app, or open the palette, and type part of a name: files, folders and apps from across your Mac, in any word order, with one typo forgiven in words of 5 letters or more. Results come grouped as a top hit, Applications, Folders, Documents and everything else, each with the matched letters marked, its folder, size and date. On our test Mac (M1 Pro, 16 GB, 1.58 million files and folders in the index) a keystroke's search took a median of 1.6 to 1.8 ms, and building the first index took about 8 seconds.
• Chips. All, Commands, Files, Apps, Folders, Images and Code narrow the list in one click. Files lists files only, so a folder that shares the name doesn't sit on top of the file you wanted.
• Filters you can type. ext:pdf,key for extensions, type:folder for a kind, in:~/Projects for a folder, size:>100mb, mtime:7d or mtime:today, 'word for an exact word, ^IMG_ and .pdf$ for the start and the end of a name, and !draft to leave something out. The ? button in the palette lists them.
• A kind of file becomes a filter. Type a word that names a kind of file, such as pdf, pdfs, .swift, videos, folders or today, and a pill beside the field offers it as a filter with a live count of what it would list. Tab or a click takes it: pdf becomes ext:pdf, and the newest files come first.
• Act on a result. ↩ opens it, ⌘↩ reveals it in Finder, Space is Quick Look once you've moved down the list, ⌘C copies the path, and ⌘⌫ moves it to the Trash after asking. Show all opens the whole list in its own window.
• Search settings. Include or exclude folders, with node_modules, .git, DerivedData, Pods, build folders, caches and Time Machine backups left out by default. Hidden files are off until you turn them on. The pane shows the index's size and file count, Rebuild index starts it again, and turning Search off deletes the index after you confirm.
• Request a feature. From the Help menu, the palette, Settings or any screen's ⋯ menu: say what iKnowMyMac should do. Similar requests appear as you type, each with its status and votes, so you can vote for one instead of posting a new one. The request is sent only when you press Send, after a preview that lists what will leave your Mac.
• Suggest a change to this screen. In every main screen's ⋯ menu. The request sheet opens with the screen's name filled in and a picture of the iKnowMyMac window only, attached where you can see it and remove it.
• Report a problem. Say what went wrong and what you expected. Help articles that might answer it appear as you type. Diagnostics are off unless you tick the box, and then you see every item and can remove any of it. Reports are private and never appear on the public board, and the sheet says when to expect a reply: within 2 working days.
• My requests and replies. A My requests screen in the sidebar's new Help group: the requests you posted or voted on with their status and votes, your problem reports, and replies as a thread you can answer. When a request you posted or voted on ships, a “You asked, we shipped” banner says so, once.
• One question after 14 days. After 14 days of use, a small card asks once: “What's the one thing iKnowMyMac should do next?” Not now asks once more after 30 days, then never, and “Ask me occasionally” in Settings turns it off.

Changed

• The palette has room for files. It is larger, with the chips under the field and a footer that says how many files are indexed and whether the index is up to date. Under All, commands still come first.
• A search field at the top of the menu bar popover opens the same palette.
• A Help group in the sidebar holds My requests, with a dot when a reply is waiting.
• A ⋯ menu in every screen's header for suggesting a change to that screen, requesting a feature or reporting a problem.

Privacy

• Search reads names only. File and folder names, sizes and dates, never what's inside a file. The index is kept in the app's own folder on your Mac and is never uploaded, synced or included in diagnostics. Turning Search off deletes it.
• What you search for stays on your Mac. Search queries, file names, the index, lists of your apps and processes, the USB log and Pulse data are never part of a request, a report or diagnostics.
• A request or a report is sent only when you press Send, after a preview of exactly what will leave your Mac: what you wrote, the name of the screen it's about, a picture of the iKnowMyMac window if you attached one, your email if you typed one, and a licence check.
• No account. The licence check is a one-way code made from your key, never the key. An email address is collected only if you type one, and is used only to reply to you and to tell you when your requests change.
• Diagnostics are off unless you tick them. Then you see them first and can remove any line: the app version, your macOS version, your Mac's model and memory, and up to 200 lines of iKnowMyMac's own log with your home folder shown as ~.
• Similar requests and help articles are looked up as you type. While a request or report sheet is open, the words typed so far go to iknowmymac.com to find matches. Nothing else is sent, and nothing after the sheet closes.
• Two things happen without a press. Opening My requests fetches your own requests, votes and replies, and once a day, only after you've posted or voted, the app asks whether one of your requests changed status. Settings → Feedback turns the daily check off.
• The full list of what leaves your Mac is in Settings → Privacy and in the privacy policy.

Credits

• Search is built on fsearch by Noah Dunnagan (MIT licence). iKnowMyMac uses its own copy with the content index left out, so only names are indexed, and the licence texts are in Settings → Search.

New

• Tidy your Downloads. A review of Downloads grouped by why something is probably safe to remove: installers whose app is already installed, archives already extracted, exact duplicates, and files untouched for 30 days. Every file says why, nothing moves until you confirm, and moved files go to the Trash. Tidy suggests and moves. It never deletes on its own.
• Screenshots off the Desktop. One switch saves new screenshots to monthly folders in Screenshots, and your last ten wait in the menu bar and the command palette, ready to drag or copy. Your previous setting is kept and comes back with one click.
• Clear the Desktop. One button moves the Desktop into a dated archive folder, keeping anything you touched in the last hour and anything you pinned. A weekly reminder, only when there's something worth doing.
• Tidy log and undo. Every move is recorded with where it came from and where it went, and each one can be undone.
• Pulse trackpad textures. Pick a material for your trackpad, Mist, Ripple, Cobble, Sand, Mesh or Vinyl, and it clicks softly under your finger as you point, scroll and tap, in every app. The Pulse material beats faster as your Mac works harder. Intensity, roughness and spacing are yours to set. Needs a Force Touch trackpad.
• Done tones. A soft tone the moment your coding agent or a build is done, each event with its own switch and tone, and an optional tone when a long terminal command finishes.
• Optional sounds. A soft sound layer for clicks, scrolls and keys, separate from textures: have either, both or neither.
• USB log. Every USB and Thunderbolt device that connects to your Mac, with time, name and what it is, including while the Mac is locked or at the login window.
• New keyboard alert. An urgent alert the moment a keyboard your Mac hasn't seen before connects, the classic sign of a disguised USB device.
• Slow cable check. Connected now shows each device's speed next to what it supports, with a heads-up when a cable or hub holds a drive back, and what a charger supplies.
• Safe look. A read-only overview of an unknown drive's files before you open anything from it.

Changed

• A new sidebar. Live readings for CPU, memory, GPU, disk, network and battery at the top, a Needs you card with what wants attention, and five groups: Investigate, Clean up, Devices, Developer and Modes. Sub-views moved into tabs in each screen's header. Prefer a plain list? Switch in Settings.
• A smaller menu bar popover. Readings as tiles (or the list, if you like it), a row of quick controls for Keep awake, Always-on, Pulse and the internet check, and a Heads-up line when something needs you.
• Diagnose moves fixed causes out of the way. After you close simulators, quit an app or stop servers, the cause moves to a Done list, and Run again shows what changed.
• Internet check closes on a second click of its menu bar tile; Again in the result runs it again.
• Lighter in the background. iKnowMyMac now does far less work while you're not looking at it: in our tests with coding agents busy, its background CPU use fell by about two thirds.

Privacy

• The USB log stays on your Mac. It records device names and IDs, never file contents.
• Click and key sounds need Input Monitoring, which you grant. They hear only that a click or a key press happened, never which key, and nothing is kept.
• Tidy reads only the folders you allow, and only file names, sizes and dates.

New

• Git identity map. A new Git item under Developer. Who am I here? lists every repo in your project folders, the folders you add and the repos your coding agents worked in, with the email it commits as and the file and line that sets it, its remote, the key it pushes with, the GitHub CLI account and the signing key. Mismatches are named in one sentence, such as “Commits as Personal” in a Work repo. Repo contents are never read: only Git config, remotes, refs, commit authors and status counts.
• Identity profiles. A profile holds a commit name and email, a signing key, an SSH key and a GitHub CLI account. Rules by folder or by remote owner are written as Git's own includeIf lines, in one marked block in ~/.gitconfig plus include files in ~/.config/iknowmymac/git/. You review the exact diff first, a backup is taken, and Undo restores the file byte for byte. Your own lines are never rewritten, and existing includeIf setups are offered as profiles.
• GitHub CLI account switcher. The active gh account for each host in the menu bar popover, the Git screen and the command palette (“Switch GitHub CLI account…”). Switching runs gh's own gh auth switch, so the app never reads a token. A suggestion appears when your terminal is in a repo whose profile uses the other account, and auto-switch per folder is there if you want it, off by default.
• Wrong identity alerts. Within seconds of a commit whose author doesn't match the repo's profile, an alert says so. Amend author rewrites only that last commit, and only if it hasn't been pushed. With more than one wrong commit, or one already pushed, it explains your options and rewrites nothing.
• Repo status. Every known repo's branch, ahead and behind as of the last fetch, changed and untracked files, stashes and the oldest one's age, a merge or rebase in progress, a detached HEAD and the time since the last commit. “3 repos have unpushed work” in the popover, with an optional reminder at the end of the day. Open in Terminal or your editor, open on the Git host, or copy the push command.
• Agent sessions show commit authors. Each agent session lists the commits the agent made in its repos and the author it used, checked the same way as your own: “Claude Code made 4 commits as your personal email in acme-corp/storefront.”

New in Beta

• Always-on mode (Beta). A new Always-on tab, under Battery on MacBooks, keeps the Mac awake with the lid closed while it's on power, so it can stay reachable over SSH and Screen Sharing. A separate power component makes the change after you approve it, records your original settings first, and puts them back when you turn the mode off, quit iKnowMyMac, uninstall the component, or restart after a crash. It pauses on battery unless you choose otherwise, shows a small mark on the menu bar item while it's on, and lists itself among your sleep blockers.
• Readiness check. “Ready to run unattended?” with one row per item: power adapter, lid-closed awake, a display, wake for network access, restart after power failure, Screen Sharing, Remote Login, Tailscale or ZeroTier, FileVault and unattended restarts, automatic macOS updates, heat headroom and free disk space. Each row says why it matters and offers a fix where iKnowMyMac can make one, or opens the right System Settings pane. FileVault is never suggested off.
• Heat and battery guards. While Always-on is on, the heat guard alerts when the Mac has run hot for 10 minutes and, by default, lets it sleep if it stays critical for 20. Losing power sends one alert, and with “Also on battery” on, it lets the Mac sleep at 20%. After a restart, an alert says the Mac is back online.
• Tell us how it works. Always-on is in Beta. Send feedback… in the Always-on tab shows the whole report first; nothing leaves your Mac until you send the email yourself. For Simulator and screen capture with the lid closed, use an HDMI dummy plug or an external display for now.

Changed

• What's new. The 1.2 tour covers the Git screens and, on MacBooks, Always-on.

Privacy

• Two optional network features, both off by default. Verify with GitHub makes one SSH handshake per key with your Git host, which replies with the account name; no API token is used. Background fetch runs git fetch on your known repos every 30 minutes, with your own credentials, to their own remotes only. Nothing is sent to us. The privacy policy lists both.
• Always-on sends nothing. It changes only sleep and power settings on this Mac, through a component that can do nothing else.

New

• Agent sessions. A new Agent sessions section under Projects, one card per AI coding agent session (Claude Code, Codex CLI, Gemini CLI, Cursor's agent, Aider, OpenCode and others): the project folder, how long it ran, the processes and ports it started, and the leftovers still running after it ended. Stop leftovers lists exactly what stops before anything does. Prompts and transcripts are never read.
• Local AI models. A new AI models section under Projects shows every model loaded in Ollama, LM Studio, llama.cpp and MLX servers, with its quantisation and the memory it holds, and the GPU memory limit macOS sets for your Mac. “Will it fit?” answers in one line for an installed model or a size you type, offline. Unload a model or stop a runtime, with a confirmation.
• New at login alerts. A notification when an app adds a login item, background item, launch agent or daemon, or a crontab line, naming the app that added it, who signed it, whether it runs as you or as root, and when it runs. The first run records what's already there without alerting. History is in the new Login & background section.
• Backup health. Your last successful Time Machine backup in the popover and on the Overview, with alerts when there's been no backup for 3 days, the backup disk hasn't been connected for 7 days, or 3 backups fail in a row. Backblaze, Arq, Carbon Copy Cloner and SuperDuper are detected.

Changed

• What's new. After an update, a short tour of what changed, with a Show me for each feature. Open it again from iKnowMyMac › What's New in iKnowMyMac.
• Projects. Dev servers, Agent sessions and AI models are listed under Projects in the sidebar.
• Update checks. New installs check for updates once a day without asking first. You can turn this off in Settings → Updates.

Changed

• Opens at login. iKnowMyMac now starts with your Mac, so its alerts, keep awake and update checks are always running. You can turn this off in Settings → General.

Fixed

• Stopped in the background. If macOS stops iKnowMyMac while it runs in the menu bar, the next launch explains why and opens Login Items & Extensions, where Allow in the Background turns it back on.

New since the private beta

• Updates tab. One place to update your other apps: each app's own feed, Homebrew, GitHub and Electron releases, with App Store apps listed too. Every download is checked against its source and signature before anything is replaced, the old copy is kept as a backup, and Undo puts it back. Update All asks for your password once, or never with the Installer set up.
• Updates coverage. A public list of the apps iKnowMyMac can update, at iknowmymac.com/updates/coverage, with one page per app naming the source it reads and the checks every download passes before it's installed.
• Sound tab. See which apps are playing sound, and set a volume or mute for each app, in the app or from the menu bar popover. Levels are remembered per app and per output device.
• Bluetooth tab. Every paired device with its kind and the battery it reports, which are connected and which are paired but away. The lowest battery is named at the top.
• Arrange everything. Hide, show and reorder tabs, sections, popover tiles and menu bar items. One Reset puts everything back.
• A menu bar item per readout. Put CPU, memory, GPU, network, disk, temperature, battery or volume in the menu bar on its own, as a value, a graph or both. ⌘-drag to reorder.
• Units. Celsius or Fahrenheit, bytes or bits, and CPU per core or per Mac. Settings previews each choice with your Mac's live figures.
• Dock mode. An optional Dock icon. Opened by hand, the app shows its window; launched at login, it stays in the menu bar only.
• Notch alerts. On MacBooks with a notch, alerts grow out of the notch: what happened, a sparkline and the actions. On other Macs, and in full-screen apps, alerts arrive as notifications.
• Storage map. Folders ranked by size with drill-down, plus large files, old downloads, purgeable space and dev caches. The only action is Move to Trash, after a confirmation that lists every item.
• App profiles and complete uninstall. One page per app with its memory, CPU and energy history and every file it keeps. Remove completely lists each file, skips files shared with other apps, and moves the rest to the Trash.
• Keep awake. Keep your Mac awake for a set time, while an app runs, while a build or dev server is active, until a download finishes, or only on power. It uses a public power assertion and shows up in the sleep blockers like any other app.
• Mac health report. A one-page PDF and image with the model, chip, memory, SSD wear and data written, battery health and cycles, and macOS version. Generated on your Mac, nothing uploaded.
• Disk speed test. An on-demand sequential read and write test with a share card. It warns before writing its temporary file and deletes it afterwards.
• Wi-Fi quality. Signal, noise, signal-to-noise ratio, channel, band and link rate next to the network figures. The network name needs Location permission; everything else works without it.
• What is this? Every app and process row explains itself: what it does, whether it's safe to quit, why it usually gets busy and what's happening right now, with one fix where there is one. Unknown processes show their path, parent app and who signed them. The explanations ship inside the app; nothing is looked up online.
• Device battery alerts. Low and fully charged alerts for AirPods (left, right and case), Magic Keyboard, Mouse and Trackpad, other Bluetooth devices that report a battery, and the Mac itself, each with its own threshold. At most one alert per device per charge.
• Is it my Wi-Fi or the internet? Check runs Wi-Fi, router, DNS and internet tests in order, stops at the first failure and says what's wrong in one sentence, then measures speed with macOS's own network test. Alerts when the connection drops and comes back, and when a VPN connects or disconnects, without sending anything. Opt-in public IP change alerts. 30 days of outages on the History timeline.
• Command palette. ⌥⌘K opens a small search box over any app. Find apps, processes, ports and commands: quit or force quit, stop a process, free a port, keep the Mac awake, run a diagnosis or jump to any tab. Every destructive action confirms in place: Return to confirm, Escape to cancel. The shortcut is yours to change and needs no Accessibility permission.
• What iKnowMyMac costs you. The app's own CPU, memory and energy, now and averaged today, in the popover footer and Settings. When no window, popover or menu bar item of ours is visible, it switches to a low-cost mode that reads only what your alerts need, every 15 seconds.
• Keep awake, like Caffeine. The display stays on while keep awake runs, the hold is renewed every few seconds, and an optional setting keeps chat apps from showing you as Away.
• Always in the menu bar. iKnowMyMac ignores quit requests nobody asked for, so it stays in the menu bar after you close its window or use the command palette.
• Smoother everywhere. Charts you can scrub with haptic detents, sliders that snap, and lighter background sampling.

Known limitations

• Temperatures and fan speeds are validated on M1 Pro. On other chips, the app shows the thermal state instead.
• Network and GPU figures are system totals. Per-app network and per-app GPU figures aren't available.
• Notch alerts don't follow Focus modes; turn them off in Settings if you want Focus to filter alerts as notifications.
• If something looks wrong on your Mac, tell us.

New

• Apps, not processes. Around 1,100 processes become around 50 app rows on our test Mac. Every Chrome and Electron helper sits under the app it belongs to.
• Overview. CPU, memory, GPU, disk, network and battery cards, each with a sparkline.
• A tab for each metric. Apps sorted by that metric, with expandable rows that show each process.
• Quit and force quit from any app row, each with a confirmation first.
• Menu bar extra in four display modes (icon, single figure, sparkline, stacked) with a popover for a quick look.
• 30 days of history, kept on your Mac at 10-second detail for a day, 1-minute detail for a week and 5-minute detail for a month.
• Alerts for misbehaving apps: CPU at 70% or more for 10 minutes, memory growing by 1 GB or more in an hour, 1 GB of disk writes in 10 minutes, or 500 MB of network traffic in 10 minutes. Add your own alert rules, and get told when your Mac is thermally throttled.
• Temperatures and fans. CPU and GPU temperatures and fan speeds, plus the batteries of Bluetooth accessories.
• Why is my Mac slow? A diagnosis that ranks the causes with the evidence behind each one, worked out on your Mac. On macOS 26 and later, an on-device Apple model phrases the summary.
• Timeline. Scrub back through 30 days and see which apps were busy at any moment.
• Sleep and battery. What kept your Mac awake, why it woke, overnight drain by app, and battery health.
• Developer mode. Dev servers and open ports grouped by project, idle servers, port conflicts, Docker containers, iOS simulators, and reclaimable developer disk space, which is moved to the Trash and never deleted outright.
• Share card and copy dashboard. Save or copy an image of your Mac's state.
• Weekly digest, delivered as a notification.
• Optional read-only helper that lets the app see system processes. It can't run commands or change anything. What it does.

Known limitations

• Temperatures and fan speeds are validated on M1 Pro. On other chips, the app shows the thermal state instead.
• Network and GPU figures are system totals. Per-app network and per-app GPU figures aren't available.
• Without the optional helper, some system processes are hidden.
• This beta was tested on an M1 Pro Mac. If something looks wrong on your Mac, tell us.