Verify download integrity
Compare the SHA-256 digest after downloading. The manifest covers every archive linked on this page; a mismatch means the file is incomplete, stale, or not the reviewed artifact.
Download SHA256SUMS.txt
PowerShell: Get-FileHash .\downloaded-file.zip -Algorithm SHA256
Publisher-signing status: the current JSO-owned Windows executables are not Authenticode-signed, so Windows may show Unknown Publisher. The SHA-256 manifest detects changed or incomplete bytes when obtained through this HTTPS site, but it does not authenticate a Windows publisher identity. A future signed build must use a current certificate and retain the same archive/checksum verification path.