Every file rmoriedata ships is listed with its SHA-256 in a manifest, and the manifest is signed with an XMSS (RFC 8391, SHA-256) key whose public half ships with the package. Loading a table checks its file against the manifest; this function checks all of them at once.
Value
A data frame with one row per manifest entry, then one per
unlisted file: path, bytes, sha256 (the manifest digest, or the
file's own for an unlisted file), listed, ok (the file on disk is
listed and matches). The attribute "signature" is TRUE when the
manifest's signature verified, and the function errors if it did not.
Details
A file present in the installed store but absent from the manifest is
reported too, hidden (dot) files included, as a row with
listed = FALSE and ok = FALSE: a file added to the store is as much
a change as a file altered in it.
What is covered: every file under the package's extdata directory (or
the directory named by options(rmoriedata.store = )), which holds
every table, dictionary, catalog and Parquet copy that mdload(),
mdpath(), mddict(), siuload() and cihitbls() read. What is not
covered: the package's R code, its compiled code, and the two lazy-data
objects complaint_sample and arrest_sample (stored in the package's
data database, not in extdata); these are installed files of the
package itself, which tools::checkMD5sums("rmoriedata") checks
against the MD5 file of a CRAN install.