THE REFERENCE DESK

The details
matter.

A clear path from a download to a working tool.

Tool guides

The library is taking shape.

No tools have been published yet. Installation and workflow guides will arrive alongside each public release. The information below is a general reference.

Checking a download

A SHA-256 checksum is a fingerprint of a file’s contents. Calculate it for a downloaded file, then compare the full result with the checksum published for that exact release.

These are example commands. Replace downloaded-file.zip with your actual filename and run the command in the folder containing it.

TERMINAL / EXAMPLE
shasum -a 256 downloaded-file.zip

If the values differ, don’t use the file. Download it again from the official release page and recheck it.

A checksum is not a signature.

A matching checksum checks that two copies have the same contents. It does not, on its own, prove who published a file. A digital signature can provide publisher authenticity when verified using a trusted signing identity.

Each future release will describe the integrity and signature information actually available for its artifacts. An unsigned file will be identified as such.

Before you install

Check the operating system, processor architecture, required runtime, and available storage. Read the release’s limitations and any instructions about privileges, networking, and where data is stored.

Tool-specific guidance will appear here when its release is ready.

Go to the tool collection →