thefinder808

thefinder808 / WrapTune-MacOS

Public

macOS companion to WrapTune — build Intune .intunewin packages from a Mac (in-house engine, Avalonia UI)

19
0
89% credibility
Found Jun 01, 2026 at 19 stars -- GitGems finds repos before they trend. Get early access to the next one.
Sign Up Free
AI Analysis
C#
AI Summary

WrapTune MacOS is a desktop application that lets IT administrators build Microsoft Intune deployment packages entirely on a Mac — no Windows virtual machine or Microsoft's official tool required. You drag in your installer files (.exe, .msi, .ps1, etc.), click one button, and get a properly encrypted package that Microsoft's Intune service accepts. The app can optionally sign your code with your certificate before packaging. It runs entirely on your Mac, produces the same format as Microsoft's official tool, and has been tested in real enterprise deployments.

How It Works

1
👋 You manage Windows computers from your Mac

You're an IT administrator who needs to push software to Windows machines, but you don't want to deal with Windows or virtual machines just to package installers.

2
📦 You download and install the app

You grab the signed, Apple-notarized app from GitHub and drag it into your Applications folder — Gatekeeper accepts it without any workarounds.

3
🎯 You drag in your installer files

You drag your folder of installation files onto the window, and the app automatically picks out your .exe, .msi, or .ps1 file as the main setup program.

4
🔐 Optional: You sign your code for Windows SmartScreen

If your organization requires signed software, you connect your certificate and the app signs your installer before wrapping it — all without leaving your Mac.

5
You click Package and watch it work
🔒
The encryption uses a secret key it generates just for this package

AES-256 encryption with a separate authenticity check ensures the package can't be tampered with during upload or download.

📋
For MSI files, it reads your installer metadata automatically

Product codes, version numbers, and install behavior are extracted directly so Intune knows how to uninstall and upgrade later.

6
📁 You find your new package in the output folder

The app drops a single .intunewin file in the folder you chose, named after your original installer.

🚀 You upload it to Microsoft Intune and your Windows computers install it automatically

Your package goes through Intune's normal process, and every Windows device in your organization receives and installs the software — all built from your Mac.

Sign up to see the full architecture

5 more

Sign Up Free

Star Growth

See how this repo grew from 19 to 19 stars Sign Up Free
Repurpose This Repo

Repurpose is a Pro feature

Generate ready-to-use prompts for X threads, LinkedIn posts, blog posts, YouTube scripts, and more -- with full repo context baked in.

Unlock Repurpose
AI-Generated Review

What is WrapTune-MacOS?

WrapTune-MacOS is a native macOS app that builds Microsoft Intune `.intunewin` packages without requiring a Windows VM or Microsoft's official tooling. If you manage Windows fleets from a Mac, this lets you wrap `.exe`, `.msi`, `.ps1`, `.cmd`, and `.bat` installers into the format Intune expects, entirely on macOS. It ships its own clean-room implementation of the `.intunewin` specification using AES-256-CBC encryption with HMAC-SHA256 integrity checking, plus a hand-written MSI metadata reader. The UI is built with Avalonia and supports light/dark themes.

Why is it gaining traction?

The hook is simple: no Windows VM required. Microsoft's official Content Prep Tool is Windows-only and closed-source, so Mac admins traditionally had to spin up a VM or skip local packaging entirely. WrapTune replaces that entire toolchain with a self-contained engine that has zero third-party crypto dependencies. Optional Authenticode code signing is supported via `osslsigncode` (PFX/PKCS#11) or Azure Artifact Signing (via `jsign`), letting you sign payloads before wrapping in one pass. A Python verifier script independently re-derives every cryptographic value, giving you a second opinion on package correctness without uploading to Intune.

Who should use this?

Mac-based IT admins managing Windows endpoints through Intune who want to build Win32 app packages without a Windows VM. If you're wrapping Zoom, Chrome Enterprise, or PowerShell installers for Intune deployment and prefer staying on your Mac, this is purpose-built for that workflow.

Verdict

WrapTune-MacOS solves a real, narrow problem well. The codebase is well-structured with tests and an independent verifier, but with 19 stars and a credibility score of 0.9%, it's a niche tool from a solo maintainer. If your workflow fits the use case, it's worth trying -- just validate packages against your Intune tenant before relying on it for production deployments.

Sign up to read the full AI review Sign Up Free

Similar repos coming soon.