verify-integrity

verify-integrity

A modern CLI tool to easily generate and verify file hashes.

Installation

You can run the tool directly using npx (no installation required):

npx verify-integrity <file> <expected_hash>

Or, install it globally to use it anywhere on your system:

npm install -g verify-integrity

Usage

verify-integrity [options] <file> <expected_hash>

Arguments

Argument	Description
file	Path to the file you want to verify. Use - to read from stdin
expected_hash	The expected hash string to compare against

Options

Option	Description	Default
-a, --algorithm <value>	Hashing algorithm to use	sha256
-p, --partial	Allow a partial match — checks if the expected value is a hash prefix	false
-q, --quiet	Suppress all visual output	false
-V, --version	Output the version number
-h, --help	Display help for command

Examples

Basic SHA-256 verification (default):

verify-integrity ./myfile.zip b94d27b9934d3e08...

Specifying a different algorithm:

verify-integrity -a sha512 ./myfile.tar.gz 9b71d224bd62f378...

Partial hash matching (useful when you only have a short hash prefix):

verify-integrity -p ./myfile.zip b94d27b9

Reading from stdin:

curl -sL https://example.com/file.zip | verify-integrity - b94d27b9934d3e08...

Supported Algorithms

The CLI supports the following standard algorithms (dynamically verified against your system's OpenSSL environment):

Algorithm	Security	Best For...
sha256 (Default)	Secure	The modern standard. Best for general use and secure downloads.
sha512	Maximum	High-security environments or sensitive data verification.
md5	Broken	Legacy systems or fast checks for accidental download corruption.
sha1	Weak	Legacy enterprise software and old documentation.

Requirements

• Node.js >= 20

License

This software is licensed under the MIT License. See the LICENSE for more info.