Verifying downloads
Use SHA-256 to confirm a downloaded file is complete and untampered.
The download page shows a SHA-256 for every package. After downloading, compute the file's hash and compare it character by character with the value on the page. Do not install if they differ.
# macOS
shasum -a 256 ~/Downloads/CoderBoost-1.0.0-arm64.dmg
# Linux
sha256sum ~/Downloads/coderboost-1.0.0-linux-amd64.tar.gz# Windows PowerShell
Get-FileHash $env:USERPROFILE\Downloads\CoderBoost-Setup-1.0.0.exe -Algorithm SHA256File names are examples only; use the file you actually downloaded.
Why verify
The versions on the download page come from a signed release manifest, and the website verifies the manifest's signature before showing download links. Checking the SHA-256 confirms that the file on your machine is the one listed in the manifest.