Downloads you can verify.

Verify locally

sha256sum -c SHA256SUMS.txt

Maven repository

The Android core is also published to a Maven repository, with a POM that declares its dependencies, so Gradle resolves them for you. Flutter, React Native and Unreal resolve it from there too. The files have .sha1, .sha256 and .sha512 checksums next to them.

// settings.gradle.kts
dependencyResolutionManagement {
    repositories {
        google()
        mavenCentral()
        maven { url = uri("https://docs.pushhub.kemegames.com/maven") }
    }
}

// app/build.gradle.kts
dependencies {
    implementation("com.kemegames.pushhub:pushhub-android:0.1.0-beta.7")
}