Inventory.
One inventory across every Windows package manager.
Currently in development — early-access slots available.
What's broken without it.
Today, asking "what is installed across our fleet?" requires reconciling outputs from winget, Chocolatey, Scoop, npm, pip, .NET tools, PSGallery, and the registry. Each tool has its own version conventions, identity model, and gaps. Inventory drift goes unnoticed for months, and the picture you give the auditor is always at least 24 hours stale.
The approach.
Attestree Inventory unifies Windows package managers into a single attested inventory model — winget and Chocolatey today, with Scoop, npm, pip, .NET, and PSGallery landing as their collectors ship. Every install, upgrade, and uninstall emits a normalized event keyed by canonical artifact identity. Per-user installs are attributed to the user who has them — with last-seen staleness — instead of dissolving into a machine-level row. The fleet view is live, queryable, and exportable as a signed bundle — the same one your auditor reads. Beyond inventory, Chocolatey is now managed the way you already manage winget — subscribe, ring-deploy, converge, roll back — with detonation-backed attestation for choco packages landing as the next slice.
Roadmap, in three moves.
Canonical artifact IDs
Stable identity across winget, Choco, Scoop, npm, pip — no more reconciliation joins.
Live fleet query
GraphQL-style API for "show me every machine running X version Y or older."
Drift alarms
Automatic alerts when a fleet diverges from its declared desired-state manifest.
Ready for inventory on your fleet?
Early-access slots are open through GA. Tell us about your fleet.