Cashew
Cashew is an open-source budget and expense tracking app built with Flutter, supporting iOS, Android, and web platforms. It offers multi-currency accounts, custom budgets with time periods, transaction categorization, and cloud sync via Google Drive and Firebase.
Key facts
Objective fields from the source. Values we can't verify are shown as “Unknown” rather than guessed.
| Field | Value |
|---|---|
| Repository | jameskokoska/Cashew |
| Owner | jameskokoska |
| Primary language | Dart |
| License | GPL-3.0 — OSI-approved |
| Stars | 4.5k |
| Forks | 738 |
| Open issues | 9 |
| Latest release | 5.3.4+396 (2024-07-01) |
| Last updated | 2026-03-09 |
| Source | https://github.com/jameskokoska/Cashew |
What Cashew is
Flutter-based application using Drift (SQL ORM) for local persistence and Firebase for authentication, backup, and cross-device synchronization. Deployed as native apps (iOS/Android via app stores) and as a Progressive Web App (PWA), with biometric authentication support.
Get the Cashew source
Clone the repository and explore it locally.
git clone https://github.com/jameskokoska/Cashew.gitcd Cashew# follow the project's README for install & configurationNeed it deployed, integrated, or customized instead? DEV.co ships production installs.
Best use cases
Implementation considerations
- GPL-3.0 license requires any modifications or derivative works to remain open-source and redistribute source code; internal closed-source customizations must remain internal only.
- Firebase dependency (authentication, backup, sync) creates vendor lock-in; self-hosting requires fork and alternative backend (e.g., Supabase, self-managed backend).
- Biometric authentication requires platform-specific configuration (iOS Keychain, Android BiometricPrompt); testing needed per target device family.
- CSV and Google Sheets import workflows may require manual data mapping or cleanup; no documented ETL error handling or rollback.
- Web PWA deployment requires HTTPS, service worker support, and modern browser capabilities; older browsers or network-restricted environments may have limited functionality.
When to avoid it — and what to weigh
- Enterprise Compliance or Regulated Financial Services — Cashew is a consumer app with no SOC 2, FedRAMP, HIPAA, or financial service regulation compliance documentation. Not suitable for organizations handling sensitive financial data or subject to audit requirements.
- Requirement for Commercial Liability or SLA Guarantees — As a GPL-3.0 open-source project, Cashew provides no warranty, SLA, or commercial support contract. Suitable only for self-managed deployments or where GPL obligations are acceptable.
- Need for Advanced Reporting or Accounting Integration — Cashew is a personal budgeting tool, not an accounting system. No native integration with QuickBooks, Xero, accounting APIs, or business tax-filing workflows.
- Offline-First or Low-Connectivity Environments — While Drift provides local SQLite storage, backup and sync rely on Firebase/Google Drive. Limited documentation on conflict resolution or offline-first strategies; not ideal for consistently disconnected use.
License & commercial use
GPL-3.0 (GNU General Public License v3.0). Copyleft license: any modification or derivative work distributed must include source code and remain under GPL-3.0. Internal use without distribution is unrestricted.
GPL-3.0 does not prohibit commercial use, but imposes reciprocal obligations: if you modify and distribute Cashew (or deploy a modified version as a service), you must provide source code and license derivatives under GPL-3.0. Packaging as-is in an app store is permitted; closed-source commercial forks are not. Requires legal review if considering forking or embedding.
DEV.co evaluation signals
Editorial assessment — not user reviews. Directional, with an explicit confidence level.
| Signal | Assessment |
|---|---|
| Maintenance | Active |
| Documentation | Adequate |
| License clarity | Clear |
| Deployment complexity | Low |
| DEV.co fit | Good |
| Assessment confidence | High |
Biometric authentication is supported for local app lock. Firebase/Google Drive integration handles credential storage via OAuth; review Firebase security rules and backup access controls. No security audit, penetration testing, or vulnerability disclosure policy documented. Local SQLite database encryption not mentioned; sensitive data (account details, transactions) stored locally requires device-level encryption review. Users should verify Firebase project security settings and enable two-factor authentication on Google accounts.
Alternatives to consider
YNAB (You Need a Budget)
Proprietary SaaS with strong reporting, mobile-first design, and financial behavior coaching; suitable for users prioritizing support and integration with banks. Higher cost; closed-source.
GnuCash
Open-source (GPL) desktop accounting software with double-entry bookkeeping and tax reporting; aimed at personal finance and small business. Steeper learning curve; limited mobile support compared to Cashew.
Firefly III
Open-source self-hosted personal finance manager with Docker deployment; full control over data and backend. Requires self-hosting infrastructure and system administration; more complex than Cashew for casual users.
Build on Cashew with DEV.co software developers
Review the source code on GitHub, test the web PWA, or install from app stores. For commercial modifications or backend integration, consult legal on GPL-3.0 obligations and consider Devco's custom development services.
Talk to DEV.coRelated open-source tools
Surfaced by semantic similarity across the DEV.co open-source index.
Related on DEV.co
Explore the category and the services that help you build with it.
Cashew FAQ
Can I use Cashew for a business or accounting team?
What happens if Google/Firebase services go down?
Can I modify Cashew and deploy a closed-source version?
How do I export my data if I want to switch to another app?
Software developers & web developers for hire
DEV.co is a software development agency delivering custom software development services to companies building on open source. Our software developers and web developers design, integrate, and ship production systems — spanning web development, APIs, AI, data, and cloud. If Cashew is part of your open-source databases roadmap, our team can implement, customize, migrate, and maintain it.
Ready to Evaluate Cashew for Your Use Case?
Review the source code on GitHub, test the web PWA, or install from app stores. For commercial modifications or backend integration, consult legal on GPL-3.0 obligations and consider Devco's custom development services.