downloads SHA-256 verified · ship with checksums.

Verified downloads.

Every artifact ships with a SHA-256 checksum. Verify before installing. For most users, the one-line installer at /install is faster and handles checksums for you.

VS Code extension

v1.0.6 Universal

Works in Cursor, Cline, Continue, Windsurf, Codespaces, Roo Code, plain VS Code, and catches GitHub Copilot inline edits. Fires on every save.

File: literalsec-1.0.6.vsix · 42,592 bytes
SHA-256: 1c0ce3f632fdc856b71f12ec2e9e4299f87c205679157fec233c06ffc06f7be4

Download .vsix ↓ Install guide →

# Install from the .vsix
code --install-extension literalsec-1.0.6.vsix

JetBrains plugin

v1.0.2 Beta

IntelliJ IDEA, WebStorm, PyCharm, GoLand, RustRover, RubyMine, PhpStorm, CLion, Android Studio. Drop-in install.

File: literalsec-jetbrains-1.0.2.zip · 1,639,895 bytes
SHA-256: 3e70875d8d46f4ecd99a5ca30fb39eff15c8a9a412d36a71a725b5a840ae18d3

Download .zip ↓ Install guide →

# In your JetBrains IDE:
# Settings → Plugins → ⚙ → Install Plugin from Disk… → pick literalsec-jetbrains-1.0.2.zip

CLI script

v1.0.0 Core

Single Node script. No deps. literalsec init auto-detects git, VS Code, Claude Code, Cursor and wires each.

File: literalsec-cli-1.0.0.js · 17,134 bytes · Node 18+ · MIT
SHA-256: 679be1dd5cf9529f21011d16fb95f4737a44532882a8a875cde7f658fa5f0616

Download cli.js ↓ Install guide →

# One-line installer (recommended)
curl -fsSL https://literalsec.com/install.sh | bash

# Or install the file manually
curl -fsSL https://literalsec.com/downloads/literalsec-cli-1.0.0.js -o /usr/local/bin/literalsec
chmod +x /usr/local/bin/literalsec

Git pre-commit hook

v1.0.1 Universal

Works for any AI tool, any editor, any workflow — as long as you commit via git.

File: literalsec-git-hook-1.0.1.js · 8,423 bytes · Node 18+
SHA-256: 0dcd65645a8b2bde55d97c044f705c9549462f9b33229f458b5f919af37327ce

Download hook ↓ Install guide →

# One-line installer (recommended)
curl -fsSL https://literalsec.com/install-git-hook.sh | bash

# Or install the hook file manually
cp literalsec-git-hook-1.0.1.js .git/hooks/pre-commit
chmod +x .git/hooks/pre-commit

Installer scripts

CLI installer (install.sh)

v1.0.0

What runs when you do curl -fsSL literalsec.com/install.sh | bash.

File: literalsec-install-1.0.0.sh · 5,067 bytes
SHA-256: a1aae70715e4cdd90ecd0c356c39a8339ece57e8e66e5c093773e6660715ce3c

Download .sh ↓

Git-hook installer (install-git-hook.sh)

v1.0.0

What runs for the git-hook one-liner.

File: literalsec-install-git-hook-1.0.0.sh · 3,064 bytes
SHA-256: 75023ea45b338f6bc6cdb8d3f5e12de5c381f2ea70e0f98645bf17d01ff305ea

Download .sh ↓

Verify checksums

Recommended way (uses the published SHA256SUMS)

Download the manifest and verify every file in one command:

curl -fsSL https://literalsec.com/downloads/SHA256SUMS -o SHA256SUMS
sha256sum -c SHA256SUMS

Or single-file

sha256sum literalsec-1.0.6.vsix
# Compare the output against the published SHA-256 above.

SHA256SUMS — all artifacts in one file