Threat Model Reviewer
Releases
Every published build, with its release notes, downloads and file sizes. Desktop and CLI builds are self-contained; the separate skill needs the CLI. Executables and installers are Authenticode-signed, not ZIP containers.
All releases
Release history on GitHub
Browse every version, its release notes and all downloadable files.
View releases on GitHub
Verify before you deploy. Executables and installers are Authenticode-signed; ZIP containers are not. Confirm a supported binary's signature and record each download's hash:
Get-AuthenticodeSignature .\<file> and Get-FileHash .\<file> -Algorithm SHA256.
Signing currently uses a self-signed certificate, so SmartScreen may warn on first run — see the
security policy.
For managed rollout, see enterprise deployment.