← Installation

MacCrab 1.22.5
Release evidence

Checked 10 October 2026Build 1.22.5.1216

The published download passes the artifact checks below. Runtime qualification is a separate, incomplete evidence trail.

This record comes from a fresh download of v1.22.5, inspected read-only on macOS 26.6.2, Apple Silicon. MacCrab was not installed or launched, and its system extension was not activated.

Verified against the download

Passed Download integrity
The 81,388,292-byte DMG matches the SHA-256 published in GitHub’s release asset metadata and this site’s release record.
Passed Publisher signature
The DMG, app and system extension pass signature verification. The publisher is Peter Hanily, Apple Team ID 79S425CW99. The app also passes the deep, strict check of nested code.
Passed Apple notarization
The DMG’s stapled ticket validates. Gatekeeper accepts both the disk image and app as Notarized Developer ID.
Passed Update signature
The v1.22.5 appcast’s Ed25519 signature verifies against the downloaded DMG using the public key inside the signed app. This was a signature check, not an update installation.

Read the commands and results (JSON) · Repeat the verification yourself

Exact artifact

SHA-256
d04fd517004ba5f349248aa789cde65e4e858b3b77d33121a47248d1e9f76ce9
App version
1.22.5 · build 1.22.5.1216
Build target
macOS 13.0 minimum; universal arm64 and x86_64. These are binary properties, not an installation-test matrix.

The build-input attestation extracted from the signed app matches the source commit, source tree and attestation hash in the release metadata snapshot. It records the publisher’s build inputs; this review did not independently reproduce the binary.

Runtime evidence still needed

None of the following was established by this artifact review. A release-specific result should name the host, macOS version, workload and outcome.

  • Installation and sensor operation: clean installation, permission approval, event receipt and recovery after restart.
  • Detection and ordinary use: positive detection cases and alert rates during normal development activity.
  • Resource use: measured CPU, memory, database growth and disk activity at idle and under load.
  • Upgrade and removal: an upgrade from a named release and clean system-extension deactivation and removal.
  • Agent compatibility: named agent versions, their configuration, trace propagation and fallback behavior.

The supported-OS document at this release still discusses a September v1.22.0 candidate. It does not qualify every supported OS and architecture for v1.22.5. The benchmark document describes a measurement method, not demonstrated detection efficacy.

A current native screenshot of this downloadable build is also missing from this record. The homepage’s native screenshot archive remains labelled v1.17.6; its interactive preview depicts fictional activity from v1.22.6 development source.

What these checks establish

They provide evidence about the downloaded bytes, publisher identity, notarization and update signature at the time of review. They do not measure how well MacCrab detects threats, how reliably it runs, or how much access a plugin receives.

Threat model · Privacy and collection · Setup, updates and removal

Back to installation