fix: use sha256 to checkout external files

app/lib/blobs.js

@@ -95,7 +95,7 @@ module.exports = function (sbot, checkout_dir) {
           return cb(null, dst, false)
 
         // yes, check its hash
-        var hasher = createHash()
+        var hasher = createHash('sha256')
         pull(
           toPull.source(fs.createReadStream(dst)),
           hasher,

app/lib/windows.js

@@ -40,8 +40,9 @@ module.exports.open = function (url, sbot, blobs, opts, params) {
             )
           } else
             console.log(err) // :TODO: something nicer
-        } else
+        } else {
           shell.openItem(filepath)
+        }
       })
     } else {
       // open in the browser

package.json

@@ -25,7 +25,7 @@
     "electron-prebuilt": "^0.28.2"
   },
   "dependencies": {
-    "multiblob": "^1.4.3",
+    "multiblob": "^1.5.0",
     "multicb": "^1.1.0",
     "muxrpc": "^5.0.1",
     "phoenix-api": "~8.1.0",