
Security News
AI Agent Lands PRs in Major OSS Projects, Targets Maintainers via Cold Outreach
An AI agent is merging PRs into major OSS projects and cold-emailing maintainers to drum up more work.
create-dmg
Advanced tools
Create a good-looking DMG for your macOS app in seconds
Imagine you have finished a macOS app, exported it from Xcode, and now want to distribute it to users. The most common way of distributing an app outside the Mac App Store is by putting it in a .dmg file. These are hard to create, especially good-looking ones. You can either pay for a GUI app where you have to customize an existing design or you can run some homebrewed Bash script and you still have to design it. This tool does everything for you, so you can play with your 🐈 instead.
This tool is intentionally opinionated and simple. I'm not interested in adding lots of options.
Ensure you have Node.js 20 or later installed. Then run the following:
npm install --global create-dmg
$ create-dmg --help
Usage
$ create-dmg <app> [destination]
Options
--overwrite Overwrite existing DMG with the same name
--no-version-in-filename Exclude version number from DMG filename
--identity=<value> Manually set code signing identity (automatic by default)
--dmg-title=<value> Manually set DMG title (must be <=27 characters) [default: App name]
--no-code-sign Skip code signing the DMG
Examples
$ create-dmg 'Lungo.app'
$ create-dmg 'Lungo.app' Build/Releases
The DMG requires macOS 10.13 or later and has the filename App Name 0.0.0.dmg. For example, Lungo 1.0.0.dmg.
It will try to code sign the DMG, but the DMG is still created and fine even if the code signing fails, for example if you don't have a developer certificate. You can use the --no-code-sign flag to skip code signing entirely and prevent exit code failures in CI environments.
Important: Don't forget to notarize your DMG.
If either license.txt or license.rtf is present in the current working directory, it will be added as a software license agreement when opening the image. The image will not be mounted unless the user indicates agreement with the license.
Original icon → DMG icon
![]()
![]()
FAQs
Create a good-looking DMG for your macOS app in seconds
The npm package create-dmg receives a total of 1,946 weekly downloads. As such, create-dmg popularity was classified as popular.
We found that create-dmg demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
An AI agent is merging PRs into major OSS projects and cold-emailing maintainers to drum up more work.

Research
/Security News
Chrome extension CL Suite by @CLMasters neutralizes 2FA for Facebook and Meta Business accounts while exfiltrating Business Manager contact and analytics data.

Security News
After Matplotlib rejected an AI-written PR, the agent fired back with a blog post, igniting debate over AI contributions and maintainer burden.