Every install script, every version, with the date it changed.

You pipe a script into a shell and hope it's the same one you read last month. hsum fetches watched install scripts on a schedule, records the SHA-256 of the exact bytes served, keeps the old copies, and shows you the diff for every time it moved.

Not live yet. Here's roughly what using it will look like.

$ curl -s 'https://hsum.dev/v1/lookup?url=ollama.com/install.sh' | jq

{
  "script": "ollama",
  "sha256": "a7f3c1d904e8b2775af0c3319e6b41d8…",
  "first_seen": "2026-08-04T09:12:44Z",
  "stable_days": 26,
  "versions": 17,
  "previous": "3b91ee7c2af5d0138ba64e9c07d5182f…"
}

$  

What it will do