Lookup & Verify
Search by content hash, commit SHA, PURL, SWHID, or package name to verify integrity and review security findings.
Unsafe: 0–49
Caution: 50–79
Pass: 80–100
Drop a file or click to compute its SHA-256
For full package content_hash, use the CLI. Single files only, max 500 MB.
Search by package name, ASF ID, SHA-256 hash, commit SHA, or PURL.