Inventory.
One inventory across your Windows package managers.
Currently in development — early-access slots available.
What's broken without it.
Today, asking "what is installed across our fleet?" requires reconciling outputs from winget, Chocolatey, Scoop, npm, pip, .NET tools, PSGallery, and the registry. Each tool has its own version conventions, identity model, and gaps. Inventory drift goes unnoticed for months, and the picture you give the auditor is always at least 24 hours stale.
The approach.
Attestree Inventory brings your Windows package managers into a single inventory — winget managed and attested today, Chocolatey and Scoop inventoried (neither is deployed until it can be attested), with npm, pip, .NET, and PSGallery on the roadmap. Software that arrived outside any package manager shows up too, from the uninstall entries the endpoint reports. Per-user installs are attributed to the user who has them — with last-seen staleness — instead of dissolving into a machine-level row. The fleet view is live in the console, and /fleet exports it as a signed bundle (JSON and CSV) that wep-bundle-verify checks offline; user names go in only when you ask for them and state a purpose. Chocolatey and Scoop apps Attestree already installed stay installed, held until their packages can be tested and attested; detonation-backed attestation for them is planned.
Roadmap, in three moves.
Canonical artifact IDs
Stable identity across winget, Choco, Scoop, npm, pip — no more reconciliation joins.
Live fleet query
GraphQL-style API for "show me every machine running X version Y or older."
Drift alarms
Automatic alerts when a fleet diverges from its declared desired-state manifest.
Ready to see every install on your fleet?
Early-access slots are open through GA. Tell us about your fleet.