Download
Every file of a release, the packages, the public source tree, their manifests and signatures, from two places: this site, or the GitHub release. The registry and GitHub are the primary channels; this site serves the same files when they are out of reach.
Release
Public source tree
| File | Size | SHA-256 | Get it from |
|---|---|---|---|
| awa-public-f0edfca41af5.tar.gz tar.gz archive | 53.4 MB | f361ff4d69e1d8272cc3b02939b091e155b6b159b81de799eeba11a379560e8b | |
| awa-public-f0edfca41af5.zip zip archive | 55.8 MB | 95fa1e9e5254121b0b2841ed0cdbe5e93cb5389b96988cbc454bb702d3c2e8e8 | |
| awa-public.2026-10-07.awa-digest-manifest.json digest manifest | 677.5 kB | 5eb9b03cf71c039fe4869dbf42b9494fc5ce6a6887dd6e427fe042c1da7949ac | |
| awa-public.2026-10-07.awa-digest-manifest.json.awa-sig manifest signature | 5.1 kB | e69f503c0ec49ded29deb8e28c61ea18938b34ad800c1f1374a3614a03072ac0 | |
| chain.json key chain | 17.6 kB | 114ac7f1d9491fc851aa8b6b88c3e299ef1411f8e6dedfb139d94b0f816b5e44 |
Packages
Office family
| File | Size | SHA-256 | Get it from |
|---|---|---|---|
| fonts-1.0.0.tar.gz tar.gz archive | 855.1 kB | 275bc04a6b651bb19626619ffa1768f73a71d570db3ae8fd7e3f22a0fc87d3cd | |
| fonts-1.0.0.zip zip archive | 1.0 MB | 096b28c9a67e8cd3d9470f503fc1b2164042c71153206b38607a48fad723a485 | |
| awacloud-fonts.spdx.json SBOM (SPDX 2.3) | 2.9 kB | a341240a2a6b0625382b13cd7f3d37e893713884f78fcab193b1d8e5d75a6e1f | |
| awacloud-fonts.cdx.json SBOM (CycloneDX 1.6) | 3.9 kB | 8cd587fe93ddeb539d3374b8fec453afcf2aca8f5e30829dcefa4c6cd10d44de | |
| fonts.1.0.0.awa-digest-manifest.json digest manifest | 44.8 kB | 77e01ec32de41a69bf325b36ae1e58daa7b09b96669c1deb4b4562b6fd5677c3 | |
| fonts.1.0.0.awa-digest-manifest.json.awa-sig manifest signature | 5.0 kB | 647cb9d077e2431fa23e7ea8756dcc55150f871e88638fc9100002c314516a81 |
GitHub: @awacloud/fonts@1.0.0
npm: package page · registry tarball — The registry tarball is a different file from the <repo>-<version>.tar.gz archive listed above: the archive is built from the assembled export tree, while the registry serves its own tarball. Both come from the same source commit.
| File | Size | SHA-256 | Get it from |
|---|---|---|---|
| md-1.0.0.tar.gz tar.gz archive | 419.0 kB | dc5199317a5591535c029cabd4871cb0d6223c10df48b9b847aafd3219b9ce07 | |
| md-1.0.0.zip zip archive | 487.2 kB | f8bf15909aeb33c11d1b82024c5218932c79ccb3e984e22fc888ac1f16deaf80 | |
| awacloud-md.spdx.json SBOM (SPDX 2.3) | 2.8 kB | d8e808e86caaf19fdba9ba7f9e6ffd951cda08c8eeb694a5e219fae7277a2dd2 | |
| awacloud-md.cdx.json SBOM (CycloneDX 1.6) | 3.8 kB | 778082ed917c16f0c554e49577ebf65c5fb22ba8a3e5cc293f40644ef0c3d88e | |
| md.1.0.0.awa-digest-manifest.json digest manifest | 17.4 kB | 1547d2ca9e0b226f7a0ae3e020de8d6dd20f6f17b3421ecd4b8108a4c6a6f9a6 | |
| md.1.0.0.awa-digest-manifest.json.awa-sig manifest signature | 5.0 kB | 093087fb9cacf663b70f6166baa56bae4c077b4caa1a4007324c23305a831031 |
GitHub: @awacloud/md@1.0.0
npm: package page · registry tarball — The registry tarball is a different file from the <repo>-<version>.tar.gz archive listed above: the archive is built from the assembled export tree, while the registry serves its own tarball. Both come from the same source commit.
| File | Size | SHA-256 | Get it from |
|---|---|---|---|
| oconv-1.0.0.tar.gz tar.gz archive | 277.9 kB | 966bc0abbfccdd0adf138952716a4b8075d5a2ca388e6371d7aaa947a641d708 | |
| oconv-1.0.0.zip zip archive | 349.3 kB | 3f334b1e0c9df5f1931ff323af1394c3cf7adf4d61cc3893732b543a4d342b9b | |
| awacloud-oconv.spdx.json SBOM (SPDX 2.3) | 9.1 kB | 305255b8ee89216f3a2355ba84b037add505cf477987d972d60c274c4c94ad3d | |
| awacloud-oconv.cdx.json SBOM (CycloneDX 1.6) | 11.0 kB | 2526e07ffe886090f8f9af6e585f3ef87c27424065d05eb823f3d29a7b167647 | |
| oconv.1.0.0.awa-digest-manifest.json digest manifest | 13.2 kB | 3545aed507c1cb86c421fdee087146beb5b460dc1485cae8b7b5359f6b0c8945 | |
| oconv.1.0.0.awa-digest-manifest.json.awa-sig manifest signature | 5.0 kB | 61d68a9cc1c47dcaab8a82b1a7e4ec1e951cf079bd80244c82b67319d7171f9a |
GitHub: @awacloud/oconv@1.0.0
npm: package page · registry tarball — The registry tarball is a different file from the <repo>-<version>.tar.gz archive listed above: the archive is built from the assembled export tree, while the registry serves its own tarball. Both come from the same source commit.
| File | Size | SHA-256 | Get it from |
|---|---|---|---|
| oconv-fonts-1.0.0.tar.gz tar.gz archive | 2.4 MB | 04d7bf42bf7f97dea8311916bbbb4c3281977b92cd08b8881ffb90e22c3cf85d | |
| oconv-fonts-1.0.0.zip zip archive | 2.4 MB | 5442a4686e1c07950b7c4afb49b6c9a5c5449dd412e51c727dc8f40ffa262fb1 | |
| awacloud-oconv-fonts.spdx.json SBOM (SPDX 2.3) | 4.2 kB | 3dbdba33a5b1c97df416494dbb9a39907f27c9ea8bb43dccb0835b9418b4fbef | |
| awacloud-oconv-fonts.cdx.json SBOM (CycloneDX 1.6) | 5.3 kB | 37bb7794835869f6dbc29425b92f43405c169ac758a13e98054b86a0918cb2f9 | |
| oconv-fonts.1.0.0.awa-digest-manifest.json digest manifest | 5.8 kB | b8df47570101dc6c80bd30ac6f322d2bb03011371bd82a1271dd8ff6210a11ec | |
| oconv-fonts.1.0.0.awa-digest-manifest.json.awa-sig manifest signature | 5.1 kB | 7b32c0702eed6baf17d0bd104969ae0f06c8efdfcc945245b5b01e93c60610f9 |
GitHub: @awacloud/oconv-fonts@1.0.0
npm: package page · registry tarball — The registry tarball is a different file from the <repo>-<version>.tar.gz archive listed above: the archive is built from the assembled export tree, while the registry serves its own tarball. Both come from the same source commit.
| File | Size | SHA-256 | Get it from |
|---|---|---|---|
| odf-1.0.0.tar.gz tar.gz archive | 1.2 MB | 624f410158ca86d551ac77307750406257d8b72d11542186d48517ad6edcc729 | |
| odf-1.0.0.zip zip archive | 1.3 MB | b06b714cc7c5f477ed3ca2f55cfdb7e9064e145d83c57b63175f8e357003a149 | |
| awacloud-odf.spdx.json SBOM (SPDX 2.3) | 2.8 kB | ed175315927f8d165ad6865035d2896e54880ad707506e7a7ab542c53164d455 | |
| awacloud-odf.cdx.json SBOM (CycloneDX 1.6) | 3.8 kB | 497d4542c9be3cdb1770db6038f2b18b1bb3506ea9ab32ac1783cffeb40aeed1 | |
| odf.1.0.0.awa-digest-manifest.json digest manifest | 37.7 kB | cca24666cd47e42893cc5c59284b2532d8ad604abb1e46b0d41632114df0058f | |
| odf.1.0.0.awa-digest-manifest.json.awa-sig manifest signature | 5.0 kB | 627730c60a182cc898e85667110e1835b9e0f9f92fcca6900870f2df606c0ebb |
GitHub: @awacloud/odf@1.0.0
npm: package page · registry tarball — The registry tarball is a different file from the <repo>-<version>.tar.gz archive listed above: the archive is built from the assembled export tree, while the registry serves its own tarball. Both come from the same source commit.
| File | Size | SHA-256 | Get it from |
|---|---|---|---|
| ooxml-1.0.0.tar.gz tar.gz archive | 2.3 MB | dfd1e75e25507de3fefe47b92ec7b2bd2698a7cf4292ece46d6ad4431133692e | |
| ooxml-1.0.0.zip zip archive | 2.5 MB | 845a6050f4e3c9e2646ed2423bc67d84a3dbb16f179290d54fde1a8865b9228f | |
| awacloud-ooxml.spdx.json SBOM (SPDX 2.3) | 2.9 kB | ee1b4cf6352fa1934b4368a7c2f33f05e9ee83d235e0340240d0282c2b96d473 | |
| awacloud-ooxml.cdx.json SBOM (CycloneDX 1.6) | 3.9 kB | 60e43667f68cd366c6a26da2eda5e5001c89ea2864b8902d1e314f5dcd62e963 | |
| ooxml.1.0.0.awa-digest-manifest.json digest manifest | 39.0 kB | e2ca34e372ec699cd5861473d288214efa9cf618ea877318774c211524ddc5aa | |
| ooxml.1.0.0.awa-digest-manifest.json.awa-sig manifest signature | 5.0 kB | 314772dfd1a6d5f5737a07170bb084d6c4412623633f83f8bba913b51db19acf |
GitHub: @awacloud/ooxml@1.0.0
npm: package page · registry tarball — The registry tarball is a different file from the <repo>-<version>.tar.gz archive listed above: the archive is built from the assembled export tree, while the registry serves its own tarball. Both come from the same source commit.
| File | Size | SHA-256 | Get it from |
|---|---|---|---|
| pdf-1.0.0.tar.gz tar.gz archive | 3.0 MB | e200182ec382c60e5192a176c6a6aef03ea53cbeb26953465d4b6d1f562c8fd9 | |
| pdf-1.0.0.zip zip archive | 3.2 MB | 7b683bff2db110ddbd57c3782f97f796e736d6df8138d1ecdaf9feaf260f9943 | |
| awacloud-pdf.spdx.json SBOM (SPDX 2.3) | 4.1 kB | 2af49e7e4c95551337fc1f1b991659f0de20d0b8200aaae7714d4fb5112f2fad | |
| awacloud-pdf.cdx.json SBOM (CycloneDX 1.6) | 5.3 kB | fdfe9ee03c6dda35be3bc7c8aa7919f10be4e788c84c99a535db5190d66412c7 | |
| pdf.1.0.0.awa-digest-manifest.json digest manifest | 56.6 kB | fff77e0b99aab8281387fb5832a70545c35e9ab24f84b0fd21537cdb534f83e8 | |
| pdf.1.0.0.awa-digest-manifest.json.awa-sig manifest signature | 5.0 kB | d376d95e9aea8920b4d7c04b14a3581c4ff813f1aec2e965af9b4d7b70381a26 |
GitHub: @awacloud/pdf@1.0.0
npm: package page · registry tarball — The registry tarball is a different file from the <repo>-<version>.tar.gz archive listed above: the archive is built from the assembled export tree, while the registry serves its own tarball. Both come from the same source commit.
Tools
| File | Size | SHA-256 | Get it from |
|---|---|---|---|
| tool-convert-1.0.0.tar.gz tar.gz archive | 56.5 kB | 92b8b893ef65eddc9e39bd4ca081e7567de35cd2aa4d4e9a94148cc20b63d21e | |
| tool-convert-1.0.0.zip zip archive | 72.8 kB | 931c5568563a6036433f1917740ce1a4f33cbb15b552c2dd07d6dbe037bcc71b | |
| awacloud-tool-convert.spdx.json SBOM (SPDX 2.3) | 10.5 kB | ec0c6553148a871fd3a56437cb87b5b27a014067dac73882543b5af8ec1ac7b2 | |
| awacloud-tool-convert.cdx.json SBOM (CycloneDX 1.6) | 12.4 kB | 2b15347fc3be834857bf80d28a4ff56680fcd3ee47456bdaf46ca4f7abbd363e | |
| tool-convert.1.0.0.awa-digest-manifest.json digest manifest | 5.0 kB | f4b11667f7eb85bcbf9d8ca62c6542f1940a8398cd570f1bdd98619696f45a68 | |
| tool-convert.1.0.0.awa-digest-manifest.json.awa-sig manifest signature | 5.1 kB | 3bca568b5964b2f96296c3e37e78405aceccbe7496bd33eed4f318abe62e3184 |
GitHub: @awacloud/tool-convert@1.0.0
npm: package page · registry tarball — The registry tarball is a different file from the <repo>-<version>.tar.gz archive listed above: the archive is built from the assembled export tree, while the registry serves its own tarball. Both come from the same source commit.
Release
Public source tree
| File | Size | SHA-256 | Get it from |
|---|---|---|---|
| awa-public-3db192243e60.tar.gz tar.gz archive | 41.2 MB | a9ffc12f3b0c442b8de25f300c79c4e4458a629f0e97317a3ee5ace85d55d906 | |
| awa-public-3db192243e60.zip zip archive | 42.3 MB | d40734e1b9f9b40c983a9eaadb9ac654ccb24df1a6b475dcaaa740470cea8dc6 | |
| awa-public.2026-09-29.awa-digest-manifest.json digest manifest | 300.4 kB | 25e4607a4e31f58752d70dd7418195d28d98e5ee1e59c1a622fec66140415cb4 | |
| awa-public.2026-09-29.awa-digest-manifest.json.awa-sig manifest signature | 5.1 kB | c047ac4dec42ff8bcd146fba4b1cfead09a134dc6cae0f2423adb5bf2136a257 | |
| chain.json key chain | 17.6 kB | 114ac7f1d9491fc851aa8b6b88c3e299ef1411f8e6dedfb139d94b0f816b5e44 |
Packages
Foundation
| File | Size | SHA-256 | Get it from |
|---|---|---|---|
| fw-0.1.0.tar.gz tar.gz archive | 2.3 MB | 0cdf6e43c4c248b30a83d68a5ef2c5e301cb5dc68ab422da9dc60f2a0068a09c | |
| fw-0.1.0.zip zip archive | 2.9 MB | bbe0e059290166b5fd264efa7cc56a9efba1ddc77d309fb31e73540f7f1cf35d | |
| awacloud-fw.spdx.json SBOM (SPDX 2.3) | 2.2 kB | 07dd87a2702023ef9eea65c2b5e8ef9a65af4d236eb29dd75b11f8db49f9c76a | |
| awacloud-fw.cdx.json SBOM (CycloneDX 1.6) | 45.6 kB | 30033bc4a34bd732833b06ddb562246478c4da20911a04e95e06d19a9ee0fa17 | |
| fw.0.1.0.awa-digest-manifest.json digest manifest | 176.4 kB | cdc5509b9356e1f11c36f1c76585ea8fc47f7a0a9db6d946a580af64cb96c32a | |
| fw.0.1.0.awa-digest-manifest.json.awa-sig manifest signature | 5.0 kB | f73323444ae74c11429535693cfc8fca66d0ce88112786f71e093793ba4c815c |
GitHub: @awacloud/fw@0.1.0
npm: package page · registry tarball — The registry tarball is a different file from the <repo>-<version>.tar.gz archive listed above: the archive is built from the assembled export tree, while the registry serves its own tarball. Both come from the same source commit.
| File | Size | SHA-256 | Get it from |
|---|---|---|---|
| fw-wasm-crypto-0.1.0.tar.gz tar.gz archive | 763.3 kB | 235599f5a90a7cb3761ec9e260290fc8a3443a795c0f037d74f03892d5857425 | |
| fw-wasm-crypto-0.1.0.zip zip archive | 778.2 kB | bc18131caeb125ea9147fa4e143481a5d30aa8dfae35a7efbab6b8740fe76701 | |
| awacloud-fw-wasm-crypto.spdx.json SBOM (SPDX 2.3) | 13.4 kB | 5a7d41f25252bcfeee11fe95efad5659c28809f8e9b4cc5908d133569e5800c7 | |
| awacloud-fw-wasm-crypto.cdx.json SBOM (CycloneDX 1.6) | 45.6 kB | be8ccff44ae0d8305e69e234aab532341a7eb40343350848c828a4230923258c | |
| fw-wasm-crypto.0.1.0.awa-digest-manifest.json digest manifest | 9.6 kB | 94495ca5c069f167d468b24a3bcb87ac79824aff381298934b9578cf3befbc04 | |
| fw-wasm-crypto.0.1.0.awa-digest-manifest.json.awa-sig manifest signature | 5.1 kB | 1a2b880ba6f1a99d5047832d647bd86488d62482f82f7add68e0a87572b6ebf4 |
GitHub: @awacloud/fw-wasm-crypto@0.1.0
npm: package page · registry tarball — The registry tarball is a different file from the <repo>-<version>.tar.gz archive listed above: the archive is built from the assembled export tree, while the registry serves its own tarball. Both come from the same source commit.
Tools
| File | Size | SHA-256 | Get it from |
|---|---|---|---|
| tool-fw-bundler-0.1.0.tar.gz tar.gz archive | 43.1 kB | c21e90ba72afa3d4bd5513caf2da228162282b9aeed1396d9404181276c085fb | |
| tool-fw-bundler-0.1.0.zip zip archive | 55.8 kB | c647b9f23597d4254f9a9db17a94bb57ae489b276abf7a077710c68bc672e584 | |
| awacloud-tool-fw-bundler.spdx.json SBOM (SPDX 2.3) | 2.3 kB | 97c920bad6a40d9b4e8f3d1c1b0109a48a456a78f860ba5bca540af33000437d | |
| awacloud-tool-fw-bundler.cdx.json SBOM (CycloneDX 1.6) | 45.6 kB | 552a0befaeee9f272896ca882dfb791c3cb833ab4dc6d400e323eed9c1da70e4 | |
| tool-fw-bundler.0.1.0.awa-digest-manifest.json digest manifest | 4.1 kB | 89748b98149edc8a30fc883033c3c375399622d8e58e5fe6d2030cf20a7efbc2 | |
| tool-fw-bundler.0.1.0.awa-digest-manifest.json.awa-sig manifest signature | 5.1 kB | ded9650f2fc33d39527ec22f392d8f0cf2d6452e8987ac671b1c06288aff3020 |
GitHub: @awacloud/tool-fw-bundler@0.1.0
npm: package page · registry tarball — The registry tarball is a different file from the <repo>-<version>.tar.gz archive listed above: the archive is built from the assembled export tree, while the registry serves its own tarball. Both come from the same source commit.
| File | Size | SHA-256 | Get it from |
|---|---|---|---|
| tool-fw-codegen-0.1.0.tar.gz tar.gz archive | 31.4 kB | cd9be27b5093e97fe08bed04b3170e318455d2bdb1875be6f81f520453ba811b | |
| tool-fw-codegen-0.1.0.zip zip archive | 38.3 kB | c8bc1fb367716be1d82e828cabd09da3b0b2acc6c4dfeb1988a8d50cb1360899 | |
| awacloud-tool-fw-codegen.spdx.json SBOM (SPDX 2.3) | 3.7 kB | 5ab66b3d40f0848ccd6814030d29ee622e7d751676ccab149dc1c116658c307e | |
| awacloud-tool-fw-codegen.cdx.json SBOM (CycloneDX 1.6) | 45.6 kB | 753554233bd64d63b72d991c392705d61cc0672cec2369cf60ae56f83d9ec6f8 | |
| tool-fw-codegen.0.1.0.awa-digest-manifest.json digest manifest | 2.6 kB | 4e50cbe588e894d9dd014e094d9e993a9ede213ef25bf7fe782e29bf15e026af | |
| tool-fw-codegen.0.1.0.awa-digest-manifest.json.awa-sig manifest signature | 5.1 kB | a8101454f87ab6804d833582a5048cab569a9b7f836c9bdbb9d8dcb7722fae54 |
GitHub: @awacloud/tool-fw-codegen@0.1.0
npm: package page · registry tarball — The registry tarball is a different file from the <repo>-<version>.tar.gz archive listed above: the archive is built from the assembled export tree, while the registry serves its own tarball. Both come from the same source commit.
| File | Size | SHA-256 | Get it from |
|---|---|---|---|
| tool-wasm-crypto-0.1.0.tar.gz tar.gz archive | 50.3 kB | 0a4ddf14f33aa9769708aa3e40d1e823d9303464f16c74302a1fb20e8cdfc537 | |
| tool-wasm-crypto-0.1.0.zip zip archive | 59.5 kB | d2d021b6b345e33023f025d43c370074092bf938447c3c22351100660e612575 | |
| awacloud-tool-wasm-crypto.spdx.json SBOM (SPDX 2.3) | 2.3 kB | 9b4176b25b30e0db6f3ab27e48a85cf1f7efa68e782d1846d6a1809c4081001d | |
| awacloud-tool-wasm-crypto.cdx.json SBOM (CycloneDX 1.6) | 45.6 kB | 9783fb2dd8612763763eaa05cdf30f08a7f61d1586eaae6157c5cf6703e21140 | |
| tool-wasm-crypto.0.1.0.awa-digest-manifest.json digest manifest | 3.4 kB | f0394faa326acb599baea9f65610765c13db93b134764ff2c49af00bed48abeb | |
| tool-wasm-crypto.0.1.0.awa-digest-manifest.json.awa-sig manifest signature | 5.1 kB | 466df3f4bfdbdf38e10ca8d1b9cb486d0f8bb6b75f04bd33513d903eea2b0b85 |
GitHub: @awacloud/tool-wasm-crypto@0.1.0
npm: package page · registry tarball — The registry tarball is a different file from the <repo>-<version>.tar.gz archive listed above: the archive is built from the assembled export tree, while the registry serves its own tarball. Both come from the same source commit.
How to check a file
An archive is never signed on its own. It is covered by being listed in a signed digest manifest: a package's archives and its two SBOM files are listed in that package's manifest, the two tree archives in the tree manifest. The SBOM files are unsigned on their own, exactly like the archives.
To check a file, compute sha256sum <file> and wc -c < <file>, and compare the results with the sha256 and bytes of its entry in the manifest. Check the manifest itself with its .awa-sig signature and the key chain (chain.json) against the anchor in SECURITY.md, as described in Verifying releases.
Every file needed for that check is on this page, from both channels: the archives, the manifests, their signatures and chain.json, so the whole check can run offline. Every archive was built at the source commit shown above, from the same tree the packages were published from.
The registry and GitHub stay the primary channels. This site is the fallback: it serves the same files when GitHub or the registry is out of reach.