
Product
Introducing Supply Chain Attack Campaigns Tracking in the Socket Dashboard
Campaign-level threat intelligence in Socket now shows when active supply chain attacks affect your repositories and packages.
create-dmg
Advanced tools
Create a good-looking DMG for your macOS app in seconds
Imagine you have finished a macOS app, exported it from Xcode, and now want to distribute it to users. The most common way of distributing an app outside the Mac App Store is by putting it in a .dmg file. These are hard to create, especially good-looking ones. You can either pay for a GUI app where you have to customize an existing design or you can run some homebrewed Bash script and you still have to design it. This tool does everything for you, so you can play with your 🐈 instead.
This tool is intentionally opinionated and simple. I'm not interested in adding lots of options.
Ensure you have Node.js 18 or later installed. Then run the following:
npm install --global create-dmg
$ create-dmg --help
Usage
$ create-dmg <app> [destination]
Options
--overwrite Overwrite existing DMG with the same name
--identity=<value> Manually set code signing identity (automatic by default)
--dmg-title=<value> Manually set DMG title (must be <=27 characters) [default: App name]
Examples
$ create-dmg 'Lungo.app'
$ create-dmg 'Lungo.app' Build/Releases
The DMG requires macOS 10.13 or later and has the filename App Name 0.0.0.dmg. For example, Lungo 1.0.0.dmg.
It will try to code sign the DMG, but the DMG is still created and fine even if the code signing fails, for example if you don't have a developer certificate.
Important: Don't forget to notarize your DMG.
If either license.txt, license.rtf, or sla.r (raw SLAResources file) are present in the same directory as the app, it will be added as a software agreement when opening the image. The image will not be mounted unless the user indicates agreement with the license.
/usr/bin/rez (from Command Line Tools for Xcode) must be installed.
GraphicsMagick is required to create the custom DMG icon that's based on the app icon and the macOS mounted device icon.
brew install graphicsmagick imagemagick
Original icon → DMG icon
![]()
![]()
FAQs
Create a good-looking DMG for your macOS app in seconds
The npm package create-dmg receives a total of 1,412 weekly downloads. As such, create-dmg popularity was classified as popular.
We found that create-dmg demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Campaign-level threat intelligence in Socket now shows when active supply chain attacks affect your repositories and packages.

Research
Malicious PyPI package sympy-dev targets SymPy users, a Python symbolic math library with 85 million monthly downloads.

Security News
Node.js 25.4.0 makes require(esm) stable, formalizing CommonJS and ESM compatibility across supported Node versions.