In this case all there is to do is to put this information in the main download page.
Sorry, I am looking at https://sourceforge.net/projects/passwordsafe/files/ and cannot see hashes. Please point me to them.
Hash downloads
Wouldn't it be beneficial to publish hashes of executable downloads so that one may be satisfied that they are authentic?