Downloads and verification

Choose the operating system first, then its processor architecture. Every published archive has a SHA-256 entry in SHA256SUMS, an SPDX JSON SBOM and a Sigstore keyless signature bundle. Download the archive and its matching verification material from the same release tag.

Operating system	Architecture choices
Linux	Intel/AMD 64-bit (x86_64) or ARM64 (AArch64)
macOS	Apple silicon (ARM64 / AArch64) or Intel Mac (x86_64)
Windows	64-bit PC (x86_64) or Windows on ARM (ARM64)

x86_64 and Debian’s amd64 are names for the same Intel/AMD 64-bit CPU architecture. ARM64 and AArch64 likewise name the same 64-bit ARM CPU architecture; the preferred spelling varies by operating system.

shasum -a 256 freebasic-ng-<version>-<platform>.tar.xz

The output must equal the value in SHA256SUMS. The release workflow creates the inventory after the release assets have been measured and signs it with a Sigstore bundle. The GitHub Release remains the authoritative source for both the assets and the verification material.

Debian packages are published for amd64 and arm64. Homebrew is qualified on Apple silicon and Intel. The Arch User Repository has two distinct packages: freebasic-ng builds the signed source archive; freebasic-ng-bin installs the measured Linux x86_64 binary archive. Windows uses the matching direct ZIP archive; no package-manager channel is maintained there.