Primary check uses GitHub API (Accept: application/vnd.github.sha) for a ~40-byte response instead of downloading the full ~530KB file. Falls back to full-file hash comparison if API is unreachable. - Hex validation prevents false positives from proxy/CDN HTML responses - All badge writes guarded with 2>/dev/null (no terminal noise) - Separate connect-timeout (5s) from max-time for fast failure detection - SHA baseline reset on install/update for clean re-establishment
522 KiB
522 KiB