The first suggestion under the `# Install` header is to use a prebuilt binary like: https://github.com/haampie/libtree/releases/download/v3.1.1/libtree_x86_64

The first suggestion under the `# Install` header is to use a prebuilt binary like: https://github.com/haampie/libtree/releases/download/v3.1.1/libtree_x86_64 https://github.com/haampie/libtree/releases/download/v3.1.1/... The only verification provided is a sha256sum provided in the README, there's no way to confirm what source code or compiler was used to produce the binary, and no way to verify the binary was produced by that github user / that the README sha256 I was served was untampered with. I would propose that the 'unsafe' curl method is in fact probably safer than the recommended-first choice in the README.