Provenance for the box
you actually own.
You install software on your home boxes from six different package managers and have no idea what's actually running. Attestree gives you one inventory, real update rings, and detonation-backed attestation for winget packages — free to run at home, early-access today.
- winget Microsoft.PowerToys 0.81.1 sig:9c4f…
- choco firefox 125.0.1 inventory · held
- winget Git.Git 2.51.0 sig:e45a…
- choco 7zip 24.08 inventory · held
- scoop main/neovim 0.10.0 inventory only
Three things homelabbers ask us about first.
One inventory across your package managers
winget managed and attested, Chocolatey and Scoop inventoried; npm, pip, .NET tools and PowerShell Gallery on the roadmap — unified into a single view of what is on your boxes.
Real update rings at home
Canary, pilot, and broad rings for app updates, without an enterprise license. Roll a ring back to its previous version in one action.
Apache-2.0 installer shim
The Apache-2.0 shim that runs winget installs on the endpoint: per-user apps install in the actual user’s profile, and a shared family PC converges them for every user. Public repo at launch.
The products you'll actually run on your bench.
Inventory and attested winget updates are what you run today. Everything runs on a single node.
Inventory
One inventory across your package managers — winget, Chocolatey and Scoop, plus plain uninstall entries.
Read productAttestree for winget
Attested install gate for winget; Chocolatey inventoried, not deployed until it can be attested.
Read productFree Community Edition.
A free Community Edition Docker image — closed-source (EULA), 200-endpoint cap, early-access / pre-GA. Plus an Apache-2.0 installer shim, its source published at launch.
Or: Apache-2.0 winget-system-shim — source published at launch
"Design partner pipeline open. Be first to be quoted."