Release manifest
Checksums
Values are read from the hash sidecars attached to the latest GitHub release. SHA-256 is the security check. MD5 is here to identify a file, not to prove it is the right one. Machine-readable metadata is published as release-manifest.json.