Proof of origin

Official channels

These are the only places vannt-dev publishes code and builds. A package, extension or app that is not listed here is not published by vannt-dev.

Loading the list…

How to check a download

Drop a downloaded APK or ZIP here, or .

The file stays on this device: the page computes its SHA-256 digest and compares it with the files attached to the GitHub releases listed above.

npm packages published from GitHub Actions carry provenance that names their vannt-dev repository (the package page on npmjs.com shows it). In a project that installed them:

npm audit signatures

Extension ZIPs attached to GitHub releases carry a build attestation:

gh attestation verify <file>.zip --owner vannt-dev

For an APK, compare the SHA-256 digest of the signing certificate with the one listed above:

apksigner verify --print-certs <file>.apk