When downlaoding a file remember to verify its signature

shasum -a 256 /path/to/file