Chinese-first open-source (Apache-2.0) Windows 10/11 cleanup utility by Kiowx: regular junk cleanup with per-rule size estimation, multi-drive large-file scan accelerated by a Rust NTFS-MFT helper, duplicate/empty-folder/invalid-shortcut/uninstall-registry/context-menu tools, standard and force app uninstall with risk-tiered blocking, scheduled tasks, a remote 'rule store' (8 official packs plus Winapp2- and BleachBit-compatible sets), and a toolbox covering symlink migration, cache migration, downloads cleanup, space-usage analysis, and Docker/WSL maintenance. GUI is Python + PySide6 + Fluent Widgets; the packaged app always runs elevated (UAC at launch).
Kiowx authored ~294 of ~300 commits; a handful of small drive-by PRs. Maintains ~31 public repos of mostly small tools alongside; C Cleaner Plus is the flagship and is pushed near-daily.
License
Apache
Apache-2.0
Price
Free
Free and open source (Apache-2.0)
Launched
repo_created_at (repo and first release same day; earliest promotion found 2026-02-21)
Repo created
GitHub stars
1,958 (as of 2026-11-02)
First release
Last seen alive
Checks
Mechanical checks derived from the fields above. Each row is one fact; "not yet checked" means exactly that, not a failure. There is no composite score; read them together.
Track record
271 days ago
Source published
Yes
Release signing
Unsigned
Security contact
None found
Reproducible builds
Not yet checked
Telemetry
None
Runs elevated
Always
Auto-update channel
None
Recent activity
Last seen yesterday
Full source published (Apache-2.0); release binaries are built by a public GitHub Actions workflow (build.yml) that also runs the Python and Rust test suites
No Authenticode signing anywhere in the pipeline: Inno Setup script has no SignTool directive, PyInstaller spec signs nothing - installer and portable zip ship unsigned
No SECURITY.md, security policy, or disclosure contact found in repo or docs (checked 2026-11-02)
Observed outbound calls: update.json version check, rule-store index and rule packs fetched at runtime from the author's Gitee mirror (gitee.com/kio0), i18n manifest from GitHub raw; no analytics endpoints seen in main.py
Always elevated: uac_admin=True in the PyInstaller spec and PrivilegesRequired=admin in the Inno Setup script - the app UAC-prompts at every launch
Update check only: fetches update.json from Gitee, compares versions, prompts, and opens the download URL in the browser - no in-app downloader or installer runner
Unaffiliated near-name: 'C Cleaner Plus' is a space and a word away from CCleaner. The Chinese name 'C盘强力清理工具' ('C:-drive power cleaner') shows the actual derivation is the C: drive, not the Piriform product.
Rule store ships a 'BleachBit 兼容' compatibility set: config/bleachbit.json digests 43 of 110 CleanerML files into 409 flat JSON rules (a one-way snapshot, not an importer - BleachBit-style targets inside the app's own rule engine).
Rule store ships a 'Winapp2 兼容' compatibility set (config/winapp2.json, ~3,517 rules per the site) - the community rule file originally built for CCleaner-compatible cleaners.
Windows memory optimizer (Rust kernel + Python CustomTkinter UI) shipped May 2026, three months after C Cleaner Plus.
Research notes
Origin: repo created 2026-02-05 with the first alpha release the same day; earliest promotion found is a linux.do launch post (2026-02-21) framing it as '正式开源' (formal open-sourcing) of a build the author had shared before.
Deletion safety is the stated differentiator and is partly tested in CI: estimate-then-select flow, recycle-bin default with opt-in permanent mode, restore-point option, protected-path blocking (Windows, Program Files), risk-tiered uninstall (high-risk items unchecked by default, extreme-risk blocked), file state re-checked before delete, and undoable migrations; tests/test_safety_regressions.py runs in the release workflow.
Attack surface is real: the app always runs as administrator and deletes files, and its 'rule store' downloads remote rule packs at runtime from the author's Gitee mirror (gitee.com/kio0) - a second supply chain outside the GitHub repo that decides what gets deleted.
The BleachBit pack is a one-time digest, not an importer: config/bleachbit.json flattens 43 of 110 CleanerML files into 409 JSON tuples (delete actions with file/walk.* searches only - glob searches and all non-delete commands dropped, no os attribute). Snapshot is from 2026-02-27 and was never updated: ~15% of its rules no longer match current CleanerML after BleachBit's October 2026 Chromium-family overhaul, and 6 entries now delete on Windows what BleachBit scopes os='unix'.
Loses the license and copyright: the digest drops the GPL-3.0 copyright header carried by every source CleanerML file, leaving a per-entry 'Bit <file>.xml' provenance string as the only attribution inside the Apache-2.0 project - appears to be a GPL v3 violation. The Winapp2 pack is digested the same way (~3,517 entries, 'win2 |' provenance).
Fast cadence: roughly 60 tags in nine months mixing alpha, beta, and stable releases; v0.8.3 published 2026-11-01.
English name sits one space away from Piriform CCleaner with no affiliation; the Chinese name 'C盘强力清理工具' is literally 'C:-drive power cleaner'.
~2k GitHub stars in nine months for a solo Chinese-market project - attention largely from the linux.do community; support runs through a QQ group and Telegram channel rather than the issue tracker (0 open issues, issues exist but are lightly used).
Earliest author promotion found: posted as @Kio on the Chinese community forum linux.do 16 days after repo creation. Author says the post is the formal open-sourcing of a build shared earlier ('这次就是正式开源了,和上次发的没有区别') - that earlier post was not located. No reddit or English-language promotion found (searched 2026-11-02).
此次回归就发一个前段时间用python写的清理工具 ('for my return I'm posting a cleanup tool I wrote in Python a while back') — Intro cliche
使用的ui是微软的 Fluent 2 Design,个人觉得很美观还接近win11原生 ('the UI uses Microsoft's Fluent 2 Design, which I find attractive and close to native Win11') — Tech bingo
这个不会误删,有很多项目是可选项 ('this one won't delete the wrong things - many items are opt-in') — Trust signal
如果好用的话给项目一个小小的star就是你对我最大的支持 ('if it works well for you, a little star on the project is the biggest support for me') — Engagement hook