seems to work, tests pass. woo!

go.mod

@@ -3,6 +3,8 @@ module git.eeqj.de/sneak/attrsum
 go 1.24.1
 
 require (
+	github.com/bmatcuk/doublestar/v4 v4.8.1
+	github.com/mr-tron/base58 v1.2.0
 	github.com/multiformats/go-multihash v0.2.3
 	github.com/pkg/xattr v0.4.10
 	github.com/spf13/cobra v1.9.1
@@ -12,7 +14,6 @@ require (
 	github.com/inconshreveable/mousetrap v1.1.0 // indirect
 	github.com/klauspost/cpuid/v2 v2.0.9 // indirect
 	github.com/minio/sha256-simd v1.0.0 // indirect
-	github.com/mr-tron/base58 v1.2.0 // indirect
 	github.com/multiformats/go-varint v0.0.6 // indirect
 	github.com/spaolacci/murmur3 v1.1.0 // indirect
 	github.com/spf13/pflag v1.0.6 // indirect