github ivan-hc/AM 9.9.5
"AM" 9.9.5

15 hours ago

Checksum on the installed programs

With this release, the database has 81 new programs, and the number of unique apps has increased to 2,923 (2,505 AppImage packages and 418 programs in other portable formats).

In addition, we've introduced the first experimental checksum support for installed programs. These will appear in all options that display the version (-f, -i, -l, -a, etc.) if the installed app has an online .zsync or .DIGEST file to verify the checksum.

To use this new feature now, you need to update your applications with the -u option. The first time, applications will appear as if they're updated to a new version, but what's actually changed is the addition of a green checkmark to the version number, indicating that the installed app has passed the checksum check.

simplescreenrecorder-2026-03-08_03.11.27.mp4

Here's what the app list looks like with the -f option and the installed apps when running -l.

Istantanea_2026-03-08_03-13-35

Verification will be performed every time apps are installed.

simplescreenrecorder-2026-03-08_03.12.04.mp4

NOTE: If an application fails the checksum test, it doesn't always mean it's malicious. Checksum verification also serves as an indicator that apps comply with security standards and specifications applicable to modern AppImages, such as the .zsync file, which is also required to indicate that an application supports delta updates (with the advantage of downloading a few bits instead of the entire file during the update).

This new feature also serves to encourage AM's user base to contact the developers of a specific application to make it compliant.

This new feature, as I mentioned, verifies whether the checksum matches a .zsync or .DIGEST file present where the app is hosted. The application URL is taken from the "version" file already present in your app directories or the AM-updater, to avoid reaching the API rate limit if a site, such as github.com, imposes one.

Packaged apps are already subject to integrity verification, so they are automatically marked as valid.

The new feature specifically affects AppImage packages and portable programs whose host includes a .zsync or .DIGEST file.

For more, see #2125

Thanks @vishnu350 for this new feature!


How do I make my AppImage compliant with modern standards?

Do you have an AppImage package and want to make it compliant? Simply create it with the latest appimagetool and follow the instructions to also obtain the .zsync files needed for delta updates.

👇 Click the URL below for an easier tip 👇

https://github.com/ivan-hc/AppImage-tips

☝️ It's just a 5-minute read. ☝️


What's Changed

New Contributors

Full Changelog: 9.9.4...9.9.5

Don't miss a new AM release

NewReleases is sending notifications on new releases.