Meld

Name: Meld
Author: Kai Willadsen

by Kai Willadsen · GPL-2.0-or-later

Visual diff and merge tool

Record

These URLs are the ones Kai Willadsen declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.

nullsoftuser scopegitlab.gnome.org · publisher-owned

nullsoftmachine scopegitlab.gnome.org · publisher-owned

Run this against the file on disk. If the output does not match the hash below, the file is not what Kai Willadsen published. Delete it.

Windows · PowerShell

Get-FileHash "download" -Algorithm SHA256

macOS · Linux

shasum -a 256 "download"

Expected output

d25f98dce5e3d07a6c98f6c7a91acbfbacedac06ef5c4663dc4b614b52d2b993

Version on Homebrew: 3.22.3+105
Download URL: https://gitlab.com/api/v4/projects/51547804/packages/generic/meld_macos/3.22.3+105/Meld-3.22.3+105_arm64.dmg
SHA-256: aea65bbe21842e9c2e72c547df996858abbe05b2610c583f5121215556009527
Install with Homebrew: brew install --cask meld

Signal	Finding	Points
SHA-256 hash published	2 of 2 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built.	30 / 30
Binary provenance	2 on a domain owned by the publisherThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for.	35 / 35
Served over HTTPS	2 of 2 over HTTPSAn installer fetched over plain HTTP can be modified in transit.	15 / 15
Release recency	last release about 1 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities.	15 / 15
Licence declared	GPL-2.0-or-laterA declared licence tells you what you are actually allowed to do with the software.	5 / 5

Every version with a published manifest, newest first. Useful when you need an older build for compatibility.

Windows manifest: github.com/microsoft/winget-pkgs/tree/master/manifests/m/Meld/Meld/3.24.0
macOS cask: formulae.brew.sh/cask/meld