Insomnia

Name: Insomnia
Author: Kong

by Kong · Apache-2.0

The Desktop API client for REST and GraphQL. Make requests, inspect responses.

Record

These URLs are the ones Kong declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.

exeuser scopegithub.com · publisher domain

Run this against the file on disk. If the output does not match the hash below, the file is not what Kong published. Delete it.

Windows · PowerShell

Get-FileHash "Insomnia.Core-13.1.0.exe" -Algorithm SHA256

macOS · Linux

shasum -a 256 "Insomnia.Core-13.1.0.exe"

Expected output

f01975414027d41224d8043fd158f6c1933ba57c5b71c9337eb011e04486dd07

Version on Homebrew: 13.1.0
Download URL: https://github.com/Kong/insomnia/releases/download/core%4013.1.0/Insomnia.Core-13.1.0.dmg
SHA-256: 227a2e5b056c33933b2cd01bc5ca206c950474768433d5ee36968be7dc0cc017
Install with Homebrew: brew install --cask insomnia

Signal	Finding	Points
SHA-256 hash published	1 of 1 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built.	30 / 30
Binary provenance	1 on the publisher's own domainThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for.	35 / 35
Served over HTTPS	1 of 1 over HTTPSAn installer fetched over plain HTTP can be modified in transit.	15 / 15
Release recency	last release about 0 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities.	15 / 15
Licence declared	Apache-2.0A declared licence tells you what you are actually allowed to do with the software.	5 / 5

Every version with a published manifest, newest first. Useful when you need an older build for compatibility.

Windows manifest: github.com/microsoft/winget-pkgs/tree/master/manifests/i/Insomnia/Insomnia/13.1.0
macOS cask: formulae.brew.sh/cask/insomnia