Always run a virus scan before extracting archives from unknown sources.

Compare the file's SHA256 hash if a checksum was provided on the download page to ensure the file hasn't been tampered with.

Open the archive to look for a README.md , LICENSE , or __init__.mojo file to identify its purpose.