Check that this site is the code you can read.
We publish a fingerprint (a SHA-256 hash) of every file on this site. You can check that the files you receive match, and that a build of the public source code gives the same fingerprints.
What the site promises
Every file served here comes from a build of the public repository at one commit. No file is added or changed after the build. The list of fingerprints is at /integrity.json.
This shows the files match the source. It does not prove that your connection, your browser or Cloudflare's network is honest. It does make a quiet change to the files easy to find.
Check it here
Your browser downloads each file again, hashes it on your device and compares it with the list. Nothing leaves your device.
Files that do not match
Reproduce it yourself
This needs Git and Node.js 22 or newer. Replace COMMIT with the commit shown above.
- git clone https://github.com/sapience-design/freethetools.git && cd freethetools
- git checkout COMMIT
- npm ci
- npm run build
- node scripts/build-integrity.mjs --print
- Compare the hashes it prints with /integrity.json. Ignore the built time. It is not part of any hash.
The two should be identical, byte for byte. Astro names its script and style files after their content, and the font and library files are copied unchanged. If a hash differs, tell us.
The source for each commit is on GitHub.