@malwareminigun (1) the system should check it for you, as in the case of package managers, which is overwhelmingly the norm on Linux (2) yes