AList
A file list program that supports multiple storage, and supports web browsing and webdav, powered by gin and React.
Platform availability
Available on 2 of 9 platforms
Health score?A 0-100 score computed nightly from four factors: maintained (40%: recent commits and steady activity), popular (25%: GitHub stars, log scale), easy to install (20%: platforms, install notes, setup guides, Docker image) and light to run (15%: minimum RAM, ARM support). When the source code has been checked, a fifth factor, security check (20%: automated scan for committed secrets, unsafe desktop-app settings, known-vulnerable dependencies and project hygiene; any serious finding caps it at 20), is added. Factors without data are left out and the rest are rescaled.
73/100 Good
- Maintained
- 100last commit 10 days ago
- Popular
- 9450,262 GitHub stars
- Easy to install
- 452 install platforms, install notes, Docker image
- Light to run
- No data
- Security check
- 201 serious finding, 3 minor, CI, tests
Based on 4 of 5 factors.
Security check: 1 serious finding
- Uses github.com/rclone/rclone v1.67.0, which has a known critical vulnerability (Go)
Automated checks on commit f5aea67, 11 Oct 2026. Not an audit.
Availability: platform listings confirmed today, links checked 15 days ago
- GitHub stars
- 50,262
- Open issues
- 560
- Last commit
- 2026-10-05
- Latest release
- v3.64.0
- License
- AGPL-3.0
- Activity
- declining
Checked 8 days ago - source: GitHub (Xhofe/alist)
Resources & Compatibility
ARM (e.g. Raspberry Pi) is supported.
Checked 17 days ago - source: Docker Hub image tags and published docs
First-install notes
- Check if new sign-ups are allowed Look at the public setting called allow_register; if it is false, AList will not let anyone create a new account, so you may not be able to log in after first start. source
- Create your first account Use the user registration step (it sends a username and password) to create a login account, because without one you cannot access the AList dashboard or add file storage. source
- Add two-factor login if public If this AList site will be reached from the internet, start two-factor authentication (2FA) so a stolen password alone is not enough. It adds a one-time code step to protect your files. source
Fetched 16 days ago - each note links to its source
Variants
Alternatives
No alternatives collected yet.
Common questions
Why might AList prevent new user registration after installation?
Check the public setting allow_register. If it is false, AList will not let anyone create a new account, so you may not be able to log in after first start.
Does AList have hidden telemetry?
A community thread reports that AList was sold and now adds hidden telemetry, which is a privacy concern for self-hosters.
Can AList work with WebDAV or OneDrive/SharePoint without using an API?
Yes, AList supports WebDAV. It also supports OneDrive/SharePoint without API.
What preview support does AList include for common files?
AList supports file preview for PDF, markdown, code, and plain text. It also supports image gallery preview and video/audio preview with lyrics and subtitles.
Answers sourced from github.com, github.com, www.reddit.com
Community
- Reddit (reddit)
Collected 16 days ago - public community threads