verify-integrity

A modern CLI tool to easily generate and verify file hashes.

Installation

You can run the tool directly using npx (no installation required):

npx verify-integrity <file> <expected_hash>

Or, install it globally to use it anywhere on your system:

npm install -g verify-integrity

Usage

verify-integrity [options] <file> <expected_hash>

Arguments

| Argument | Description | | --------------- | --------------------------------------------------------------- | | file | Path to the file you want to verify. Use - to read from stdin | | expected_hash | The expected hash string to compare against |

Options

| Option | Description | Default | | ------------------------- | --------------------------------------------------------------------- | -------- | | -a, --algorithm <value> | Hashing algorithm to use | sha256 | | -p, --partial | Allow a partial match — checks if the expected value is a hash prefix | false | | -q, --quiet | Suppress all visual output | false | | -V, --version | Output the version number | | | -h, --help | Display help for command | |

Examples

Basic SHA-256 verification (default):

verify-integrity ./myfile.zip b94d27b9934d3e08...

Specifying a different algorithm:

verify-integrity -a sha512 ./myfile.tar.gz 9b71d224bd62f378...

Partial hash matching (useful when you only have a short hash prefix):

verify-integrity -p ./myfile.zip b94d27b9

Reading from stdin:

curl -sL https://example.com/file.zip | verify-integrity - b94d27b9934d3e08...

Supported Algorithms

The CLI supports the following standard algorithms (dynamically verified against your system's OpenSSL environment):

| Algorithm | Security | Best For... | | :----------------------- | :------- | :---------------------------------------------------------------- | | sha256 (Default) | Secure | The modern standard. Best for general use and secure downloads. | | sha512 | Maximum | High-security environments or sensitive data verification. | | md5 | Broken | Legacy systems or fast checks for accidental download corruption. | | sha1 | Weak | Legacy enterprise software and old documentation. |

Requirements

• Node.js >= 20

License

This software is licensed under the MIT License. See the LICENSE for more info.