FOR HOMELAB

Provenance for the box
you actually own.

You install software on your home boxes from six different package managers and have no idea what's actually running. Attestree gives you one inventory, real update rings, and detonation-backed attestation for winget packages — free to run at home, early-access today.

Get early access Read the wedge

Apache-2.0 shim SYSTEM + user context winget + Chocolatey today more managers landing

FLEET INVENTORY · PREVIEW 847 artifacts

winget Microsoft.PowerToys

0.81.1 sig:9c4f…
choco firefox

125.0.1 managed · not attested
winget Git.Git

2.51.0 sig:e45a…
choco 7zip

24.08 managed · not attested
scoop main/neovim

0.10.0 inventory only

local · postgres-backed verified

WHY THIS MATTERS HERE

Three things homelabbers ask us about first.

One inventory across your package managers

winget and Chocolatey managed, Scoop inventoried; npm, pip, .NET tools and PowerShell Gallery on the roadmap — unified into a single view of what is on your boxes.

Real update rings at home

Canary, pilot, and broad rings for app updates, without an enterprise license. Roll a ring back to its previous version in one action.

Apache-2.0 installer shim

The Apache-2.0 shim that runs winget and Chocolatey installs on the endpoint: per-user apps install in the actual user’s profile, and a shared family PC converges them for every user. Public repo at launch.

WHAT YOU GET

The products you'll actually run on your bench.

Inventory and attested winget updates are what you run today. Everything runs on a single node.

/products/inventory In dev

Inventory

One inventory across your package managers — winget and Chocolatey managed, Scoop inventoried.

Read product

/products/winget-enterprise In dev

Winget Enterprise

Attested install gate for winget; Chocolatey managed.

Read product

ACCESS

Free Community Edition.

A free Community Edition Docker image — closed-source (EULA), 200-endpoint cap, early-access / pre-GA. Plus an Apache-2.0 installer shim you build from source.

Free Community Edition 200-endpoint cap Early access · pre-GA Apache-2.0 shim (OSS)

Docker · Community Edition · pre-GA

PS> docker compose up

# Free Community Edition — closed-source (EULA), 200-endpoint cap.

# Early access / pre-GA. Request access to pull the image.

Or: Apache-2.0 winget-system-shim — GitHub release · build-from-source (public repo lands M3–M6)