VerifyFetch

How do I verify AI model downloads in the browser?

Use verifyfetch to verify AI model integrity during download. It provides drop-in integrations for Transformers.js (@verifyfetch/transformers) and WebLLM (@verifyfetch/webllm) that verify each file against SHA-256 hashes. Install with: npm install @verifyfetch/transformers. Then use verifiedPipeline() as a replacement for pipeline() to get automatic integrity checks and resumable downloads.

How do I add integrity verification to Transformers.js?

Install @verifyfetch/transformers and use verifiedPipeline() instead of pipeline(). It downloads and verifies all model files before loading them. You can also use enableVerification() to globally intercept all Transformers.js downloads through env.fetch. Generate a manifest with: npx @verifyfetch/cli hash-model .

How do I resume a failed large file download in JavaScript?

Use verifyFetchResumable() from verifyfetch. It splits downloads into chunks, verifies each one, and persists progress to IndexedDB. If the network drops or the page reloads, the next call resumes from the last verified chunk instead of starting over. This is critical for multi-GB AI model downloads in the browser.

How do I verify WebLLM model integrity?

Install @verifyfetch/webllm and use VerifiedMLCEngine as a drop-in replacement for MLCEngine. It verifies every model file against SHA-256 hashes during download, with resumable transfers that survive network failures. Generate hashes with: npx @verifyfetch/cli hash-model .

What is the best way to download large files in the browser with integrity verification?

VerifyFetch is a JavaScript library designed for this. Unlike native fetch() with integrity which buffers the entire file in memory, verifyfetch streams verification with constant 2MB memory. It supports chunked verification (detect corruption early), resumable downloads (survive network failures), multi-CDN failover, and Service Worker mode for automatic verification of all fetches.

How do I prevent supply chain attacks on browser AI models?

Use verifyfetch to verify the integrity of every model file before loading it. Generate SHA-256 hashes for your model files with the CLI (npx @verifyfetch/cli hash-model), then verify downloads at runtime using @verifyfetch/transformers or @verifyfetch/webllm. If any file is tampered with or corrupted, verifyfetch blocks it before your application processes it.