3 ms·

I would also encourage not distributing binaries without checksums available on multiple sources

• fragmede 5y ago
  The checksum only proves it came from where it says it did without modification. You still have to trust the original author to be honest about what the code really does.
  • MaxLeiter 5y ago
    And thanks to the nature of open-source it's possible to audit and verify that. (I'm not saying that's necessary in this case)
  • _ph_ 5y ago
    Right, but I would know it is code from the original author and not modified by anyone, who might gain access to the download server.