Flameshot

Name: Flameshot
Author: flameshot-org

by flameshot-org · GPL-3.0

Powerful yet simple to use screenshot software.

Record

These URLs are the ones flameshot-org declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.

wixmachine scopegithub.com · known platform

Run this against the file on disk. If the output does not match the hash below, the file is not what flameshot-org published. Delete it.

Windows · PowerShell

Get-FileHash "Flameshot-14.0.0-win64.msi" -Algorithm SHA256

macOS · Linux

shasum -a 256 "Flameshot-14.0.0-win64.msi"

Expected output

b3c38680c792410812e787d48ac1825c771fb044380d45789719b9e8373327ea

Version on Homebrew: 14.0.0,14.0
Download URL: https://github.com/flameshot-org/flameshot/releases/download/v14.0.0/Flameshot-14.0-macos-arm64.dmg
SHA-256: bb0cccb2223ce0f4bfea00d90658e85fb5dc17aa7773bf2b22c70ffdb23d7221
Install with Homebrew: brew install --cask flameshot

Signal	Finding	Points
SHA-256 hash published	1 of 1 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built.	30 / 30
Binary provenance	1 on a recognised distribution platformThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for.	29.8 / 35
Served over HTTPS	1 of 1 over HTTPSAn installer fetched over plain HTTP can be modified in transit.	15 / 15
Release recency	last release about 1 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities.	15 / 15
Licence declared	GPL-3.0A declared licence tells you what you are actually allowed to do with the software.	5 / 5

Extensions Flameshot registers itself to handle.

Every version with a published manifest, newest first. Useful when you need an older build for compatibility.

Windows manifest: github.com/microsoft/winget-pkgs/tree/master/manifests/f/Flameshot/Flameshot/14.0.0
macOS cask: formulae.brew.sh/cask/flameshot