What it does

The algorithm situation

Partial hashes

For scripting

Should you use it over the native tools? I download a file. The website has a SHA-256 hash next to it. I want to verify it. So I run sha256sum, get a wall of hex, paste the expected hash next to it, and squint at two 64-character strings trying to spot any difference. For a quick one-off verification, the native tools are clunky. On Linux it's sha256sum, on macOS it's shasum -a 256, on Windows it's Get-FileHash. Different syntax, same manual effort. (Yes, sha256sum -c exists. But it expects a properly formatted checksum file — not a hash you just copied off a download page.) So I ended up building a small CLI for this: verify-integrity. Instead of just outputting a string or failing quietly, it shows you a character-by-character diff so you can see exactly where they diverge: Matching characters are dimmed, mismatching ones are bold. Useful when you're trying to figure out if you fat-fingered something or if the file is genuinely corrupted. Or, skip saving the file entirely and pipe straight from curl: Pass - as the file path and it reads from stdin. Standard Unix convention, works naturally in pipelines. SHA-256 is the default since that's what most things use these days, but you can switch: MD5 and SHA-1 are supported too for legacy stuff, though the README is upfront about the fact that MD5 is broken and SHA-1 is weak. I didn't want to pretend otherwise. Occasionally you'll see a shortened hash prefix in release notes or some internal tool, not the full hash. The --partial flag handles that: It checks whether the generated hash starts with your prefix. There's a warning built in if your prefix is under 8 characters — short enough that false positives become a real concern. --quiet kills all output and communicates purely through exit codes. 0 for a match, 1 for a mismatch. Drop it into any script or CI pipeline without worrying about parsing output. If the native tools are already muscle memory for you, honestly just keep using them. But if you switch between machines, script things cross-platform, or just want a clear pass/fail without the manual comparison — give it a shot. The npx invocation means you don't even have to commit to installing it. It's fully open-source. Feel free to audit the code, fork it, or open an issue over on GitHub. Would love to hear what you think. Templates let you quickly answer FAQs or store snippets for re-use. Hide child comments as well For further actions, you may consider blocking this person and/or reporting abuse