somehow this happened somewhere in early 2025:
root@b:~# go install go.wit.com/apps/forge@v0.22.110
go: downloading go.wit.com/lib/fhelp v0.0.9
go/pkg/mod/go.wit.com/apps/forge@v0.22.110/windowHowto.go:11:2: go.wit.com/lib/fhelp@v0.0.9: verifying module: checksum mismatch
downloaded: h1:Az6H6IFpel5Cm5Ok8LxfPErM0PnIGOc1tBN9yaCjUeA=
sum.golang.org: h1:4705J6yZ1g7YbOtNqBjVILzrR/oWIS0bfOWpG0WNGpI=
SECURITY ERROR
This download does NOT match the one reported by the checksum server.
The bits may have been replaced on the origin server, or an attacker may
have intercepted the download attempt.
Jeff Carr