justtype verify
built by github actions from the public repository and hosted on github pages, out of reach of justtype's servers.
files
what gets checked
every file justtype.io serves is downloaded here, hashed, and compared with the hashes github actions produced from the public source. the release signature is checked against the pinned key.
beta builds are not published here.
verify from your terminal
hash what the server sends, without any web page:
loading...
compare with build-hashes.json.
build it yourself
clone, build, compare.
git clone https://github.com/alfaoz/justtype.git cd justtype npm ci VITE_TURNSTILE_SITE_KEY="0x4AAAAAACSJvMqEG5Z-iXyo" npm run build cat dist/build-manifest.json
the turnstile site key is public and part of the bundle.