What's in a pack — and how to check us

What every pack contains

• Macro-free Excel (.xlsx) — live formulas only, no VBA. A macro-free workbook cannot execute code on your machine; every calculation is visible in the cell.
• Plain-text Python (.py) — standard library only, nothing to install. The scripts make no network connections and read only the files you pass them. Open them in any text editor and read what they do before you run them — they are short on purpose.
• CSV samples and a README — plain text.

That is the complete list of file types we ship. Never executables, installers, macros, browser extensions or "download managers".

What we never do

• No third-party download portals — packs come from closelook.net only. If you find these files anywhere else, do not trust them.
• No wrappers, bundled offers, fake download buttons or redirect chains.
• No email attachments — we never send files; downloads happen only on the site.
• No tracking inside the files — a pack works identically offline.

Verify in 30 seconds

Every pack page publishes the SHA-256 checksum of the exact file we serve. After downloading, compute the checksum locally and compare — if the two strings match, the file is bit-for-bit what we published.

Windows (PowerShell or cmd):

certutil -hashfile closelook-graham-applied-pack.zip SHA256

macOS / Linux:

shasum -a 256 closelook-graham-applied-pack.zip

Pack pages additionally link a VirusTotal report where one has been seeded — the same file scanned by 70+ independent antivirus engines, at a URL derived from the checksum so it can only ever refer to the exact published file. You can also submit any downloaded pack there yourself, free and without an account.

Read the code

The Python in every pack is deliberately short and commented. The honest check for any downloaded script — ours included — is to open it and look for three things: does it import anything unusual, does it open network connections, does it touch files you didn't give it? Ours does none of the three, and you can confirm that in two minutes without being a programmer.

Found something wrong?

If a checksum ever fails to match, or a scanner flags a pack: don't run it, and tell us — contact details are in the imprint. We would rather pull a download for a day than have one bad file out there.