App store
Packages published for SpringBoard. The tablet downloads from here and checks every SHA-256 before installing.
The store listing needs JavaScript. The raw list is at /api/v1/apps.json.