Would it be possible for you to please publish checksums for your downloadable assets and do so in multiple places (any emails announcing releases, as part of the GitHub release assets and on ospray.org web pages).
This way, downloaders can ensure that the are getting what you have published.